Overview
Your money and data must always remain secure. Kashu combines bank-level encryption, biometric authentication, and strict privacy standards to protect your account.
Kashu's security practices
Encryption: sensitive data encrypted in transit and at rest (TLS 1.2+).
Fraud monitoring: Fraud Shield flags unusual activity for review.
Biometric & 2FA: Face ID, fingerprint, and one-time passcodes supported.
Access controls: only authorized staff access limited user data for support or compliance.
Compliance frameworks: safeguards consistent with PCI DSS, SOC 2, ISO 27001, and AML/KYC.
Privacy commitments
Kashu does not sell personal information.
Data is shared only as necessary with banking partners and regulators to process transactions lawfully.
Data is retained only as long as required for regulatory, tax, or service purposes.
Depending on your jurisdiction, you may request access, correction, or deletion of your data (CCPA, GDPR). See the Privacy Policy and Cookie Policy.
For more, see our security page and Fraud Shield.
Need help?
For questions about security or privacy, email [email protected].