- Access is enforced by the database. Every table has row-level security, so a budget can only be read or changed by someone with access to it, whatever screen or request they use.
- Sign-in is by a one-time code to your email, with an optional password. Passwords seen in known breaches are refused.
- Share links carry an unguessable token and stop working the moment they are turned off.
- Payments are handled by Stripe. We never see or store your card number.
- Imports are read in your browser; the source file never leaves your computer.
- Backups: we back up the service, but keep your own exports of anything important.
Found a security problem? Write to hello@actualsbudget.com.
Not what you were looking for? Write to hello@actualsbudget.com.