Security
Relay handles the most sensitive financial information your family has. We treat that responsibility with the seriousness it deserves.
Read-only access
Relay doesn't move money yet. We verify and display. Every connection is read-only for the time being.
Bank-grade encryption
All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Database-level encryption is provided by Supabase on dedicated infrastructure.
SOC 2 coming soon
We plan to pursue SOC 2 Type II certification with automated evidence collection ASAP.
Row-level security
Every database query is filtered by row-level security policies. A child cannot access another child's data even if they modify API requests. This is enforced at the database level, not the application level.
Document integrity
Every uploaded document is SHA-256 hashed at upload time. The hash is stored alongside the document. If a document is ever altered, the hash mismatch is immediately visible.
Authentication
Relay uses magic link authentication via email. No passwords are stored. Two-factor authentication via TOTP is available. Google and Apple sign-in will be available at launch.