Security at Compass
How we keep your account and your financial data safe.
Threats are stopped before they reach Compass
Every request is screened before it reaches the app or the sign-in page, and access from high-risk locations is restricted. Every connection to Compass is encrypted.
By invitation only
There is no open sign-up. Every account is invited or approved.
Strong sign-in
Sign-in follows strict password rules, and you can add a second step: a code by SMS, an authenticator app, or a passkey on your device. Changing how you sign in requires signing in again.
Read-only by design
Compass only reads your accounts. It cannot move money, pay bills or place orders.
Audited and logged
Sign-ins, changes to sign-in methods, administrator actions and support access are all audited and logged. Support access is read-only and time-limited.
Your data
Your data is encrypted and backed up regularly. It is never sold, and no AI service receives it.