Security
Your finances are yours alone.
You put numbers from your life into the Cockpit. That's why it was built, from day one, to protect that data.
We never ask for your bank password
The Cockpit doesn't connect to your bank and never moves money. You organize; we hold no access to your accounts.
Your card stays with Stripe
Your subscription is paid on Stripe's page, which follows the card industry security standard (PCI). The Cockpit never sees your card number.
Two-step verification
Turn it on in Security: besides your password, signing in asks for the code from your authenticator app (Google Authenticator, Microsoft Authenticator). If your phone is lost or someone learns your password, your data stays locked.
Every account isolated in the database
Rules inside the database itself make sure each person only sees their own boards. We test this automatically with every update.
Everything encrypted
The connection is protected (HTTPS) and the database stores your information encrypted.
Not even our team reads your numbers
The admin panel only sees accounts and plans, never the amounts on your boards. Exceptional access requires a reason, a deadline and a log entry.
System keys kept on the server
The Cockpit's secret keys never reach the browser. Nobody can copy them from the website.
Our commitment
No system in the world is infallible, and we won't promise the impossible. We promise to do it right: keep only what's needed, protect it with best practices, test constantly and tell you transparently if anything ever happens.
Tips to protect yourself
- Turn on two-step verification (Security menu, inside the Cockpit).
- Use a password just for the Cockpit, 10 characters or longer.
- Don't put bank passwords, card numbers or ID documents on your cards.
- Sign out on shared computers.
Questions, or something odd in your account? Write to hello@elevaflix.com