Account identity and business access are separate
Signing in establishes who you are. Workspace membership and role determine which business information you can access. Creating an account alone does not grant access to another company’s workspace.
During early access, the financial product is also limited to approved users. This allows testing to progress without opening every workspace operation to every registered account.
Two-step verification for sensitive work
Owners and advisors must enable and verify a second authentication factor before accessing financial data. Connecting an accounting provider can require a recent second-factor verification.
If you see a request to verify again, complete a fresh verification before retrying. This is intended to protect sensitive actions even when you already have a signed-in session.
Protected service connections
The deployed web and API services use HTTPS. Accounting-provider tokens are encrypted before storage, and the production PostgreSQL database uses private networking.
These controls are part of the current implementation. They are not a claim of independent certification, a completed security audit, or immunity from security incidents.
Questions or a security concern?
Contact support@fyntrium.com with a short description of the issue and the affected feature. Do not include passwords, authenticator codes, API secrets, or customer financial records in the initial message.
We can then agree an appropriate way to investigate. There is no public response-time guarantee or formal certification being claimed on this page.