Security & Policies

Security principles

Insimen Finance is designed around least-privilege access, protection by design, and limiting impact when an issue occurs. No digital system is risk-free, so controls are reviewed and improved as the product evolves.

Product controls

Controls are applied in proportion to the feature and its risk.

• Finance access for personal and business spaces is restricted to authorized users
• business roles are checked against server-side business membership
• role controls for shared spaces and review of significant activity
• server-side validation for data changes and session protection
• separation of Finance data from public surfaces and other products

Your role

Keep your account and devices secure.

• Use a unique password and never share it.
• Enable available account verification methods.
• Do not send passwords, one-time codes, tokens, or other secrets through regular messages.
• review amounts, categories, and shared-space member access
• not enter banking credentials, PINs, one-time codes, passwords, or payment secrets in notes
• use records lawfully and respect the privacy of shared-space members

Sensitive access and changes

Sensitive changes are checked server-side. Relevant activity may be recorded to support security, abuse prevention, and incident investigation.

Incident reporting

If you suspect unauthorized access, change your password, sign out of unrecognized sessions, and contact us. Do not include passwords, one-time codes, or unnecessary private content in a report.

Important limit

Finance is an invoice and financial record-keeping tool, not a bank, custodian, payment gateway, investment adviser, tax adviser, or transaction-recommendation provider. Use professional judgment before making a financial decision.