Security and data protection
Your data stays in Germany.
Where your data is stored, who processes it and how we protect it.
Storage location
Database and files are stored in data centres in Frankfurt am Main. Processing happens exclusively in the EU.
Encryption
TLS for every transfer. AES-256 at rest, including backups.
Login
Two-factor login via app, mandatory for all users. Finqo logs you out automatically when inactive.
Read-only access to banks
Banks are connected via finAPI, a BaFin-licensed service. Finqo reads balances and transactions. Finqo never moves money.
DATEV connection
Via an interface approved by DATEV. Access is granted once, read-only, and can be revoked at any time.
AI only in the EU
Category suggestions are generated in EU data centres. Your data is never used to train AI models.
How your data flows.
Your bank
Balances and transactions
finAPI
BaFin-licensed, read-only
Finqo
encrypted, Frankfurt
DATEV
approved interface, read-only
What Finqo never does
- Transfer money or trigger payments
- Change bookings in DATEV
- Sell or share your data
- Use your data to train AI models
What Finqo does every day
- Create encrypted backups
- Run an automated security check
- Allow access only with a second factor
Contract and deletion
Data processing
The data processing agreement under Art. 28 GDPR is part of the contract. There's nothing extra to sign.
Service providers
We name all service providers before you sign. They're based in the EU or covered by EU standard contractual clauses.
After cancellation
We delete your data within 30 days of the contract ending. On request, you get an export first.
Trial
If the trial ends without a subscription, we delete the data after 30 days.
Questions about security?
Write to us at support@finqo.de. A real person will get back to you.