We can look, never touch.
Security is the foundation of Subzero, not a feature. Here is exactly how it is built to protect you.
- Read-only bank access
- No passwords stored
- Data kept in the EU, under GDPR
We never see your bank password
You sign in on your bank's own page and approve in your banking app. We only receive a read-only permission.
Licensed EU connection
Bank access runs through a licensed account-information provider, supervised under EU payment rules (PSD2).
Passwordless sign-in
Passkeys, Apple or Google sign-in, invisible bot checks, and an alert whenever a new device signs in.
Service passwords never stored
When we cancel for you, you sign in yourself. We use that session once, then it is gone.
Encrypted, in the EU
Data is encrypted in transit and at rest, on servers in the EU.
Disconnect and delete anytime
Remove a bank in one click, or delete your account and all its data. Bank access also expires every 180 days.
This website, today
Strict security headers, no tracking or advertising scripts, and fonts served from our own domain, so nothing about your visit goes to third parties.
Found a security issue?
Tell us privately at security@nemonik.xyz. We reply within 48 hours and credit responsible disclosure.