Your data security is non-negotiable
We treat your personal and financial information exactly the way we'd treat our own. That means bank-level security and industry-leading measures protecting your data.
Certifications & Compliance
Trusted and certified by international security standards
Licensed by Czech National Bank
Account Information Service Provider with full regulatory compliance.
ISO 27001 Certified
International standard certification for financial IT services and information security management.
PCI DSS Compliant
Payment Card Industry Data Security Standard compliance for handling payment information.
PSD2 Licensed
Revised Payment Services Directive licensed for secure financial data access.
Security Practices
Multiple layers of protection for your financial data
Multi-Layer Encryption
All data is protected with multiple layers of encryption both in transit and at rest.
TLS Encrypted Channels
All communication happens via TLS encrypted channels for maximum security.
No Plaintext Storage
Client credentials are never stored in plaintext and are unreadable to staff.
Amazon Web Services
Database maintenance and hosting on enterprise-grade AWS infrastructure.
Multi-Factor Authentication
Required MFA for all system access with no super admin accounts.
Read-Only Access
We can only read your financial data, never initiate transactions or move money.
GDPR & Privacy Compliance
Your data, your control
Data Protection
- Strict GDPR compliance
- Personal data protection for users in 80+ countries
- Explicit user authorization required
- Right to data deletion
Privacy First
- No selling of user data
- Minimal data collection
- Transparent data usage
- User control over all data
Comprehensive Security Approach
Report a Security Vulnerability
If you believe you have identified a security vulnerability in a BudgetBakers product, please let us know.
Reporting security vulnerabilities helps us protect our users and continuously improve the security of our products.
You can report vulnerabilities in BudgetBakers products as well as vulnerabilities in third-party components, where those components are part of a BudgetBakers product or their vulnerability may affect the security of a BudgetBakers product.
Recommended
Reporting form
We recommend using our form, which guides you through the information we need to assess the issue. The form does not require signing in to a Google account.
Report a Security VulnerabilityAlternative
If you prefer not to use the form, you can contact us directly at:
To help us assess your report effectively, please include the following information where possible
Contact details
- Name or nickname (optional)
- Contact email, if you would like us to be able to contact you for additional information or about the outcome of our investigation
If you prefer not to disclose your identity, you can submit your report anonymously.
Affected product
- Name of the affected BudgetBakers product
- Platform or environment, for example Android, iOS, Web or API
- Application / product version or build, if known
Vulnerability information
- Short title or name of the issue
- Description of the vulnerability
- Steps to reproduce the issue, if reproduction is possible
- Expected security impact
Security impact may include, for example:
- Unauthorised access
- Data disclosure
- Unauthorised data modification
- Authentication bypass
- Authorisation bypass
- Code execution
- Denial of service
- Other security impact
Active exploitation
Please indicate whether, to your knowledge, the vulnerability:
- Is being actively exploited
- Is not being actively exploited
- You don't know
If you have information about active exploitation, please also provide:
- A short description of the observed exploitation
- The approximate date and time when the exploitation was observed
- Any other relevant information
Security incident or compromise
Please indicate whether, to your knowledge, in connection with the vulnerability:
- A security incident or compromise has occurred
- No incident has occurred
- You don't know
If an incident or compromise has occurred, please describe it briefly.
Third-party component
If the vulnerability concerns a third-party component or library that is part of a BudgetBakers product or may affect its security, please provide where possible:
- Component name
- Component version
- A public reference to the known vulnerability, if available
Other relevant information
If available, you may also include:
- Suggested fix or mitigation
- CVE or other public identifier
- Links to a proof of concept
- Relevant logs
- Links to screenshots or other technical information
- Whether you plan to disclose the vulnerability publicly
- The planned disclosure date, if any
Sensitive information
Please do not send passwords, authentication tokens, access credentials, payment details, users' personal data or other sensitive information in your first message unless strictly necessary.
If you need to share sensitive technical information or files, please mention this in your report. BudgetBakers will then agree with you on a secure way to transfer them.
Trusted by Millions
Join over 5 million users who trust Wallet with their financial data