Security & trust

Your money, kept safe.

Welsani brings your bank accounts, investments, insurance and documents into one clear overview. Because that's some of the most sensitive information you own, protecting it is our most important job — here's exactly how, in plain language.

Read-only connections You approve every payment Encrypted & EU-hosted Never sold
01 — The core promise

We can look, but never touch your money.

Our connections to your banks and investment providers are strictly read-only. Welsani reads your balances and transactions to build your overview — but it is technically unable to move, withdraw or spend a single euro on your behalf.

  • Bank connections run through regulated European Open Banking (PSD2) providers — view only, with no payment rights.
  • Investment and broker connections are view-only too: positions and valuations, never trades or transfers.
  • Every connection rests on your explicit consent, carries a built-in expiry, and can be disconnected whenever you wish.
welsani.com/connections
Rabobank · Personal
Open Banking (PSD2) connection
View only
Read balancesAllowed
Read transactionsAllowed
Move moneyNot permitted
Make paymentsNot permitted
Place tradesNot permitted
Consent expires in 88 days · Disconnect anytime
Encryption

Encrypted at every layer — even from us.

Encryption turns your information into unreadable code that only Welsani's systems can unlock. We apply it while your data travels, while it's stored, and — for everything sensitive, from account numbers to the notes you write — field by field inside our database itself.

In transit

Every connection between your device and Welsani is protected with the same HTTPS encryption used by online banking, so nothing can be read as it crosses the internet.

At rest

The documents you upload are stored with strong AES-256 encryption — the industry standard trusted by banks and governments worldwide.

Locked, even from us

Sensitive details are fully encrypted inside our database — not just your IBANs and the keys linking Welsani to your bank, but your transactions, policy numbers, personal details like date of birth and BSN, your notes, what our AI reads from your documents, and even your conversations with the assistant. Because the encryption keys are stored separately from the database itself, the encrypted data is unreadable on its own: even someone with direct database access would see nothing but scrambled text.

🔒 welsani.com
What you see
IBANNL24 RABO 0318 4729 06
TransactionAlbert Heijn · − € 42,18
Policy numberPOL-2024-88410
Bank key•••• linked
What the database stores
IBAN9f3a·c1e7·Qd8m·z0Lp
Transactionb7Kx·2tu9·evR4·nsa1
Policy numberk4Tq·8wj2·Xr5n·b9Ms
Bank keye1Vm·6y0p·hQ7t·c3Lw
Field-level AES encryption

Only Welsani's running application, using a separate protected key, can unscramble these fields to show them back to you. With direct access to the database alone, this information stays unreadable.

Isolation & access

Your overview is yours alone.

Welsani keeps each client's information in its own strictly separated, private space. Your data is never mixed with anyone else's.

Strict separation

Every piece of data is locked to your private vault, and that wall is enforced twice: our application checks every request, and the database itself independently refuses to hand over data that isn't yours. Even a mistake in our own software couldn't show your data to someone else.

Advisors see only what you share

Invite an advisor and you decide whether they see everything or only part of your portfolio. They can never edit or remove your underlying data without your permission.

Access revoked instantly

Change or withdraw someone's access and it takes effect immediately — no lingering window where old permissions still work.

Under the hood

The safeguards working quietly in the background.

Strong sign-in

Sign in with a passkey (your fingerprint or face — the modern, phishing-resistant standard), with Google, or with email and password. Passwords are never stored readably — only as a one-way scrambled hash that even we can't reverse.

Protection against guessing

Repeated wrong password attempts are automatically slowed and temporarily locked, stopping attackers from guessing their way in.

No stale access

Your session is continuously re-verified. If access is ever removed, it stops working straight away rather than lingering in the background.

Privacy-respecting AI

To read details from your documents, Welsani uses a trusted, market-leading AI provider that extracts only what's needed and keeps no copy. Your information is never sold or used to advertise to you.

Hosted in Europe

Welsani runs on enterprise-grade infrastructure within the European Union, on the same world-class platforms relied on by major banks and businesses.

Safe recovery

Your data is backed up automatically and documents are kept in versioned, protected storage, so information can be recovered if it's ever accidentally changed or deleted.

A partnership

Security is something we do together.

We invest continuously in protecting your data — strengthening encryption, access controls and monitoring over time. You can help too.

  • Choose a strong, unique password
  • Keep your devices and apps up to date
  • Only ever sign in through the official Welsani website or app

Have a question about your security or privacy? Our team is here to help.

Questions about security?

Our team is happy to walk you, or your advisor, through exactly how Welsani handles your data.

Contact our team

Bring your financial life together.

Join the beta and be among the first to feel what calm finances are like.