Trust & Safety

    Security

    Protecting your financial data is foundational to everything we build at Garde. Here's exactly how we do it.

    Infrastructure Security

    Garde is hosted entirely on Amazon Web Services (AWS). We leverage AWS's enterprise-grade infrastructure to deploy, scale, and secure every part of our application — including redundant availability zones, automated failover, and 99.9% uptime SLAs.

    • Hosted on AWS with multi-AZ redundancy
    • Auto-scaling to handle traffic spikes without degradation
    • DDoS mitigation via AWS Shield
    • Isolated VPC networking with strict security group rules
    • Regular penetration testing and vulnerability scanning

    Data Encryption

    All data stored and transmitted through Garde is encrypted using industry-standard protocols. Whether your data is at rest in our database or in transit between your browser and our servers, it is always protected.

    • AES-256 encryption for all data at rest
    • TLS 1.3 for all data in transit
    • Database encryption via Amazon RDS with encrypted storage volumes
    • Encryption keys managed through AWS KMS
    • No plaintext storage of sensitive financial credentials

    Application Security

    Access to your data inside Garde is strictly controlled. Our application enforces role-based permissions so every team member can only see and do exactly what they're authorized for — nothing more.

    • Role-based access control (RBAC) across all features
    • Multi-factor authentication (MFA) supported
    • Session management with automatic expiry
    • Full audit log of every action taken inside the platform
    • Input validation and injection protection on all endpoints

    Financial Data Handling

    We take special care with the financial data you trust us with. Garde connects to your POS, bank, and accounting systems using read-only integrations wherever possible — and we never store raw banking credentials.

    • Read-only integrations for POS and bank data where applicable
    • No storage of raw banking credentials
    • Financial data isolated per organization with strict tenant separation
    • Automated anomaly detection on data ingestion pipelines
    • Data minimization — we only collect what's needed to run the platform

    Security questions or concerns?

    If you've identified a potential security vulnerability or have questions about how Garde handles your data, please reach out directly to our security team.

    [email protected]