EncryptionIn place
- In transit
- TLS 1.2 or higher
- At rest
- AES-256
- Bank tokens
- Separate encrypted vault
- Keys
- Managed service, rotated yearly
Read-only, by design.
Tarn can see your balances and transactions. It can never move money, and it never sees your bank login. Here is how the rest of your data is looked after.
Workspace securityAll good
- Bank accessRead-only
- Data in transitTLS 1.2+
- Data at restAES-256
- 2-step sign-in4 of 4 people
Where your data goes, and where it can’t.
Four stops, each with one job. Money only ever moves inside your bank, never through Tarn.
- 1
Your bank
You sign in on your bank’s own page. Your password stays there.
11,000+ banks - 2
Regulated data provider
Issues Tarn a read-only token. No payment permissions exist on it.
Read-only token - 3
Tarn
Builds your forecast. Data is encrypted at rest, tokens kept in a separate vault.
AES-256 at rest - 4
You and your team
Roles decide who sees balances, who edits, and who can connect accounts.
4 people
No path back to your money. Tarn holds no payment permissions, so it cannot move, send or withdraw funds.
The practices behind it.
What we do today, written plainly. Your IT team can ask for the detail behind any of it.
Access controlsIn place
Four roles, set per person. Owners can require 2-step sign-in for everyone.
| Role | See balances | Edit forecast | Connect accounts | Manage people |
|---|---|---|---|---|
| Owner | Yes | Yes | Yes | Yes |
| Admin | Yes | Yes | Yes | No |
| Adviser | Yes | Yes | No | No |
| Viewer | Yes | No | No | No |
Retention and deletionIn place
Export everything as CSV whenever you like. When you leave, your data leaves with you.
- Day 0You close the account or disconnect a bank. Syncing stops at once.
- Day 30Workspace data and bank tokens are permanently deleted.
- Day 65The last encrypted backups that held it expire.
HostingIn place
- Primary region
- United States
- EU option
- Hosted in the EU, on request
- Provider
- A major cloud platform
- Backups
- Daily, encrypted, second region
Incident responseTested twice a year
- 00:00DetectAlerts page an on-call engineer, day or night.
- 00:30ContainAccess is limited and affected systems isolated.
- ≤ 72hNotifyAffected customers hear from us directly.
- 2 wksReviewA written report with what we changed.
Staff accessIn place
Support only sees your workspace when you let them, for as long as you choose.
See every sign-in and export.
Owners get a full activity log: who signed in, from where, what they changed and what left the workspace.
- 2-stepAuthenticator app or security key, for every role.
- SessionsSign out a lost laptop from Settings in one click.
- 12 monthsActivity history kept, exportable at any time.
ActivityClayhaus CeramicsExport log
- 9:14 amMara LindqvistExported the 13-week forecastCSV
- 8:52 amPriya NatarajanViewed November as adviserRead
- 8:31 amMara LindqvistSigned in from Portland, OR2-step
- YesterdayJonas BergChanged the cash floor to $150kEdit
- YesterdayTarn supportAccess ended after 72 hoursClosed
Signed in now
MacBook Air · Portland, ORThis device
iPhone · Portland, ORSign out
For your accountant or IT team.
Doing a vendor review? Tell us what you need and we will send the documents, usually within two working days.
- Security overviewOur controls in eight pages
- Data processing agreementReady to sign
- Subprocessor listWho handles what, and where
- Your questionnaireWe fill in your own format
Or write to hello@example.com
Request received.
(Preview site: nothing was sent.)