Security at Pezzi.

At a glance

• —Bank logins: Entered only in Plaid's secure window; Pezzi never sees or stores them.
• —Connecting a bank: Requires a one-time code emailed to the signed-in user.
• —Data in transit: TLS 1.2 or 1.3 on every connection.
• —Data at rest: Database, file storage, server disk and backups are encrypted; bank access tokens are encrypted again by Pezzi.
• —Your documents: Private; opened through links that expire after 15 minutes.
• —Your team: Each business is isolated; roles (owner, accountant, bookkeeper, viewer, custom) limit what each person sees.
• —Pezzi staff: Individual accounts with multi-factor sign-in; support access to an account is time-limited, needs a reason and is logged.
• —Card payments: Handled by Stripe; Pezzi never stores card numbers.
• —Backups: Encrypted nightly, kept 35 days, full restore tested.
• —Updates: Weekly vulnerability scans; critical fixes within 7 days.

Bank connections

You connect banks through Plaid, a widely used bank-connection service, so your bank username and password never reach Pezzi.

• —You sign in to your bank inside Plaid's window, or on your bank's own site for banks such as Chase. Pezzi receives only a connection token.
• —Pezzi reads the account details, balances and transactions you authorize. It has no feature that moves money from your accounts.
• —Before a bank can be connected, Pezzi emails a one-time code to the signed-in user, so a stolen password alone cannot link an account.
• —Connection tokens are encrypted in our database. When you disconnect, Pezzi asks Plaid to end the connection and erases the token once Plaid confirms.
• —Pezzi completed Plaid's security review in October 2026 and is approved for direct (OAuth) connections with banks including Chase, Bank of America, Capital One, Citibank and U.S. Bank.

Encryption and storage

Your data is encrypted whenever it moves and wherever it is stored.

• —In transit: pezzi.io accepts only TLS 1.2 and 1.3. The app's connection to its database uses TLS 1.3 with full certificate checks.
• —At rest: the database, file storage and the server's data disk are encrypted by our cloud provider, DigitalOcean. Bank connection tokens are encrypted a second time by Pezzi.
• —Documents: receipts, statements, invoices and reports are stored privately. They open through signed links that expire after 15 minutes; report downloads are removed after 7 days.
• —Backups: encrypted nightly backups are kept for 35 days, with the decryption key held off the server. A full restore was tested in October 2026 and matched every table and the accounting totals.

Who can see your data

Only the people you invite to your business, and a small number of named Pezzi staff under strict rules.

• —Every business's data is kept separate, and each request is checked against the business it belongs to. Automated tests check that one business can never reach another's data.
• —You choose each person's role: owner, accountant, bookkeeper, viewer, or a custom role with exactly the permissions you pick.
• —Passwords must be at least 12 characters. Sign-in tokens expire after 30 minutes and are renewed securely; signing out revokes them.
• —Sign-ins, role changes and other important actions are recorded in an audit log.

Pezzi staff access

• —Each person has their own account with multi-factor sign-in. There are no shared logins to our servers.
• —Access is limited to what each person's job needs and is reviewed every quarter. When someone leaves, a scripted process removes their access the same day.
• —If support needs to look into your account, access is limited in time, requires a stated reason and is recorded in the audit log.

Keeping it secure

Pezzi follows written security procedures, adopted in October 2026 and reviewed every year.

• —Scanning: every code change and a weekly job check our software libraries and container images for known vulnerabilities. A weekly scan also covers the production server and every service running on it.
• —Patching: the server installs security updates automatically. Critical issues are fixed within 7 days and high-severity ones within 30 days.
• —Supported software: a monthly check flags any component nearing its vendor's end of support, so it is upgraded in time.
• —Network: internal services and admin pages are closed to the internet. Logging in to a server needs a personal key, an authenticator code and a password.
• —Incidents: suspected incidents are contained, investigated and documented under a written procedure. Affected customers are notified as the law requires.

Retention, deletion and privacy

Pezzi keeps data only as long as a written retention policy allows, and deletes it on a schedule.

• —Your books and transactions: while your business account is open.
• —A closed business: 30 days to export, then deleted after 90 days unless a legal hold applies.
• —Bank connection tokens: until you disconnect or close the business.
• —Backups: 35 days.
• —Report downloads: 7 days.
• —Abandoned uploads: 24 hours.
• —Application logs: 30 days; security logs 12 months.

To request deletion or a copy of your data, email support@pezzi.io; we confirm your identity and authority over the business first.

Our Privacy Policy explains what we collect and why, and is shown when you sign up.

Common questions

• —Does Pezzi store my bank password? No. You sign in to your bank through Plaid, and Pezzi only receives an encrypted connection token.
• —Can Pezzi move money from my account? No. Pezzi reads the account details, balances and transactions you authorize; it has no feature that moves money.
• —Is my data encrypted? Yes, in transit (TLS 1.2 or higher) and at rest, including backups. Bank connection tokens are encrypted twice.
• —Who at Pezzi can see my books? Only named staff who need it to run the service, each with multi-factor sign-in. Support access to your account is time-limited, needs a reason and is logged.
• —Can my bookkeeper or CPA have limited access? Yes. Invite them with the accountant, bookkeeper or viewer role, or a custom role with only the permissions you choose.
• —What happens to my data if I close my account? You have 30 days to export it. It is then deleted within 90 days, and backups expire after 35 days.
• —Do you have SOC 2 or ISO 27001? Not yet. Pezzi follows written security procedures and has completed Plaid's security review; we can share more detail on request.
• —Who do I contact about security? Email support@pezzi.io.