The security model, in plain English.
Every payment moves bank to bank into your own account or trust account. The payee is fixed when the payer approves.
Payments run on New Zealand’s open banking system, regulated under the Customer and Product Data Act 2025, through our payment partner Volley.
Anyone who can move money must use an authenticator app. Codes cannot be replayed.
Bank consent tokens and integration tokens are encrypted at rest with AES-256-GCM.
Sign-ins, payments, refunds and settings changes are kept in an audit log for seven years.
Copilot only reads your organisation’s data, never trains on it, and cannot send messages or move money.