Security

No. Vyzer DOES NOT have your banking or crypto account credentials.
Vyzer uses third party financial account aggregator services - Plaid, Yodlee, Salt Edge & Zabo - to connect to your accounts. Your banking credentials are directly sent to the respective service from your browser. Vyzer servers will never see your credentials. Plaid, Yodlee, Salt Edge & Zabo provide a read-only interface to Vyzer; therefore Vyzer cannot make any transactions on your behalf.

Plaid, Yodlee, Salt Edge & Zabo adhere to industry leading practices for data security, regulatory compliance, and privacy.

The data in Vyzer is encrypted at-rest and in-transit. It’s NOT end-to-end encrypted.

When you think of online security the first thing that comes to your mind is encryption. You may have also heard of ‘end-to-end encryption’ as the gold standard for security.

End-to-end encryption makes the data encrypted or unreadable by the very service or the app you used to create it, because the app simply doesn't hold the keys to decrypt it. It’s only readable by the user who holds the key to decrypt it and no one else.

Because it will not allow Vyzer to deliver several fundamental features of the service, e.g, background syncing, ensuring safe transfer of your data to your beneficiary as simple Excel and Zip files and many more. Even though we can’t do end-to-end encryption, your data in Vyzer is indeed encrypted at-rest and in-transit.

At-rest encryption: All our databases and files storage in Amazon (AWS) servers have their content encrypted while sitting idle and when they’re backed up. This protects against unauthorized copying, transfer or retrieval of user data from our servers. Even if someone was somehow able to get hold of a backup of the database, it’d be useless, because they wouldn’t have the key to decrypt it.

In-transit: Your data when in transit from ours servers to your browser requires HTTPS on all pages, and uses HSTS to ensure browsers only ever connect to us over a secure connection.

First of all, we don't store any of your banking credentials (See the answer to the question: Does Vyzer have access to my online bank and crypto account?). If Vyzer servers were to be breached, your banking credentials are totally safe.

Secondly, all your data in Vyzer is encrypted at rest on Amazon servers. So, even if someone hacks in and gets hold of a backup of the database, it’d be useless, because they wouldn’t have the key to decrypt it.

Vyzer uses HTTPS on all pages, and HSTS to ensure browsers only ever connect to us over a secure connection. So, someone hacking into your data on transit is less likely.

Your data will be more secure.

Customer passwords and user IDs are notoriously vulnerable and easy to hack—especially when customers choose easy-to-guess passwords like “123456” and “password.” An additional vulnerability comes when people write down their passwords (in either online or physical files) where thieves and cyberthieves can discover them. 2FA makes data more secure with the use of one-time passwords (OTPs) and physical characteristics (like fingerprints and voice recognition) which are more difficult or impossible to crack.

NO. Vyzer employees can't see your data.

Our internal tools mask all personally identifiable information that our operations staff sees. Technically the database administrators have access to the encryption keys, however our employment agreements make it legally binding for any such employee with access to the keys to not decrypt or unmask user data. We also have a strict 2FA factor in place which prevents hacking of such admin accounts.

Just to be on the safer side, you should not store any information in Vyzer that’s highly risky when fallen into the wrong hands. Please don’t store any password, credit card numbers, crypto wallet private keys in Vyzer in order to transfer it to the beneficiary. You should store only enough information or documents that would help you track your wealth and for your legal heir to know and claim your property.

If your data sharing needs requires end-to-end encryption, don’t use Vyzer. We highly recommend you to look at Password Managers like LastPass and 1Password. But they come with their own complexities. E.g. the person who you want to share the information with, should also be savvy enough to be a user of the same Password Manager.

Vyzer NEVER sells your data.

Vyzer is funded solely by your subscription fee.

In some specific instances when data is shared with 3rd parties (mostly for analytics), Vyzer makes sure they don’t sell it either.

When you delete your account, we delete all your data from our primary database immediately and notify our aggregators to stop connecting your account and delete everything from their end.

We keep rotating backups for 30 days. Your data will be removed from the backup in the next backup purge cycle.