Skip to content
NelvayoSecurityPractices

Built with security in mind.

Security in a money app is not one feature, it is a set of choices repeated everywhere: how data travels, how an account proves it is yours, who is allowed in, what gets watched, and what you can control without asking us. Here is how we are building each of them.

In transit
Encrypted
Authentication
Strong, device-backed
Notifications
Every transaction

0001

In transit

Encrypted communication

Data in transit between the app and our services is encrypted using modern transport security, so the network between your device and Nelvayo is not a place where your activity can be read or altered.

Scope
App ↔ services
Method
Modern transport security

0002

Getting in

Secure authentication

Accounts are protected with strong authentication and device-level protections such as biometrics where available. Sessions are managed so you can see where your account is signed in and end a session you do not recognise.

Sign-in
Strong authentication
Device
Biometrics where available
Sessions
Visible and revocable

0003

Who is on the network

Identity verification where required

KYC checks are applied where regulations or partners require them. Verification is not there to create friction for its own sake: a network where every participant has been checked is a network where a username is safe to send money to.

Applied
Where required
Required by
Regulation and partners
Purpose
A trustworthy network

0004

While money moves

Transaction monitoring

Activity is monitored for unusual patterns to help protect accounts and to meet compliance obligations. Every transaction generates a notification, so an action you did not take is something you find out about immediately rather than at the end of the month.

Monitored for
Unusual patterns
You receive
A notification per transaction

0005

Who we build on

Established infrastructure partners

Core financial infrastructure is provided by established financial technology partners rather than rebuilt from scratch. Custody, payment and brokerage services may be provided by licensed third-party providers under their own terms and regulatory obligations.

Core rails
Established partners
Regulated services
Licensed providers

0006

In your hands

User-controlled security

Session management, notifications for every transaction and controls you manage yourself, without opening a support ticket. No system is completely free of risk — we work continuously to reduce it, and we will publish more detail on our security practices as we approach launch.

You control
Sessions and alerts
Support ticket
Not required
More detail
Published before launch

No system is completely free of risk. This page describes the practices Nelvayo is being built around; it is not a security certification or a guarantee, and it will be expanded as we approach launch.

Early access + product updates+ Launch notification

Be among the first to experience Nelvayo.

We're preparing Nelvayo for launch. Join the waitlist to receive product updates and get notified when Nelvayo becomes available.

Join the waitlist