Security & Trust
Last updated: August 28, 2026. How we protect your group's information and keep the record trustworthy.
Non-custody by design
The single biggest risk in community money — someone holding the pot — is designed out. Tanda never holds or moves funds, so there is no wallet to breach and no balance to steal. See our safety promise.
Encryption
Traffic is encrypted in transit with TLS. Sensitive details — beneficiary / next-of-kin contact and any recorded receiving details — are encrypted at rest. Contact identifiers (email, phone) and session tokens are stored as one-way hashes, never as plain text.
Tenant isolation
Every group's data is isolated at the database level with row-level security, so one association or circle can never read another's roster, cases, or ledger — even in the event of an application bug.
An append-only ledger
Confirmed record entries are written to an append-only ledger enforced at the database layer: entries are never edited or deleted, and corrections are new, linked entries. Totals are computed from this record, never stored as an editable balance — so the numbers can always be traced back to what actually happened.
Authentication & access
Members and organizers sign in with the account they set up, and access is scoped to the groups they belong to. Passwords are stored as strong one-way hashes. Sensitive actions require a fresh step-up re-verification. Staff access follows least-privilege roles, and administrative actions are recorded in an audit log.
Subprocessors
We use a small number of vetted service providers to run Tanda, under confidentiality obligations:
- Cloud hosting & application: Render
- Managed database: Neon
- Object storage: configured storage provider for proof files, if enabled
- Email delivery: configured transactional email provider
We keep this list current and update it before adding a subprocessor that handles personal data.
Reporting a vulnerability
If you believe you have found a security issue, please email security@mytanda.app. We appreciate responsible disclosure and will acknowledge your report promptly. Please do not access data that is not yours or disrupt the service while testing.
Incident notification
If a security incident affects your personal data, we will notify affected groups and, where required, the relevant authorities without undue delay, with the information you need to respond.
Your data rights
You can access, export, correct, or delete your personal data as described in our Privacy Policy. To make a request, contact privacy@mytanda.app.