Security & privacy at HomeAccounting
Trust is the product. Here is exactly how your money is handled — and how to verify it yourself.
Encrypted at rest
Bank credentials and tokens are encrypted at rest — never stored in plaintext.
Self-host = your server
Run it entirely on your own machine; your data never has to touch our servers.
Open source (AGPL)
The whole thing is auditable. Read the code, verify the claims, or fork it.
Export & leave anytime
One-click export. The "you can leave anytime" promise is real, not marketing.
Responsible disclosure
Found a vulnerability? Report it privately via our disclosure policy — we respond fast and publish post-mortems. Threat model and policy live alongside the code.
SECURITY.md & disclosure policy →