Trust & Security
You don’t know us yet. That’s why we didn’t ask you to simply take our word for it.
Before launch, Paarify’s financial calculations were independently evaluated by a Chartered Professional Accountant who is also a Certified Internal Auditor, and the platform was independently penetration tested. This page explains what was done, how your information is protected, and what Paarify can and cannot access.
Can I trust Paarify’s numbers?
Independent evaluation by a Chartered Professional Accountant who is also a Certified Internal Auditor. Completed July 2026.
The evaluator examined how Paarify captures, processes and calculates your financial information, with reference to recognized internal audit and internal control frameworks, including the IIA International Professional Practices Framework and COSO’s Internal Control – Integrated Framework.
What was evaluated
- Data captured from receipts and invoices you scan or upload
- Bank data retrieved through your Plaid bank connection
- Accounting data retrieved through the read-only QuickBooks connection
- Categorization and processing of that data
- Financial calculations and analytics
- Reports and other outputs
- Application controls
How findings were handled
Findings raised during the evaluation were addressed, and the corrections were re-tested by the evaluator before the report was issued.
What it is not
An independent evaluation is not a certification, an endorsement, or an audit of your own financial statements. Paarify is not accounting software and does not replace your accountant.
Can I trust Paarify with my financial information?
Independent penetration testing by a cybersecurity specialist. Completed September 2026.
Penetration testing, often called ethical hacking, is authorized testing in which a specialist behaves like a real attacker and tries to find and exploit weaknesses before anyone else can.
What was tested
- The iPhone and Android apps
- The APIs the apps rely on
- AI-powered features
- Public-facing websites
- Sign-in, sessions and access controls
How findings were handled
Findings were remediated and then verified through retesting by the same tester. To protect customers, detailed technical findings are not published. A high-level summary is available to partners and business customers on request, and may require a confidentiality agreement.
How your information is protected
- Encryption
- Connections to Paarify are encrypted with TLS. Sensitive stored values are encrypted at the field level.
- Account protection
- Multi-factor authentication, short-lived sessions, and sign-in rate limiting. Signing out ends your session on our servers, not just on your device.
- Access controls
- Every record is tied to your account, and that separation is enforced on our servers. Features are enforced server-side by plan, not just hidden in the app.
- App protections
- The apps only talk to Paarify servers they can verify, hide your financial information in the app switcher, and offer an optional biometric lock.
- Monitoring
- Security activity is logged, and an automated security report, including failed verification attempts at sign-in, is reviewed every day.
- Infrastructure
- Paarify runs on Amazon Web Services in the Canada (Central) region, with application servers on a private network that is not directly reachable from the internet.
- AI providers
- The AI providers Paarify uses are bound by agreements that prohibit training their models on your data.
What Paarify can and cannot access
Paarify only works with information you choose to provide or connect.
Paarify can access
- Receipts and invoices you scan or upload, and the records you enter.
- If you connect a bank through Plaid: account names and types, balances, transaction history, and institution identifiers.
- If you connect QuickBooks: your accounting records, such as customers, vendors, transactions and invoices, through a read-only connection.
- If you subscribe: your subscription status and your card brand and last four digits, provided by Stripe.
Paarify cannot access
- Your bank username or password. You enter them on Plaid’s secure screen, and Paarify never sees or stores them.
- Your money. Paarify cannot move, transfer, hold or withdraw funds, or make payments from your accounts.
- Write access to QuickBooks. Paarify reads your accounting data and does not change it.
- Your full card number. Payments are handled by Stripe.
You stay in control
You can disconnect a bank or QuickBooks at any time in the app. When you do, Paarify revokes its access with that provider. If you delete your account, your data is deleted within 30 days, except billing records we are required to keep. See the Privacy Policy for details.
Questions about security?
Email support@paarify.com. Partners and business customers can request a high-level summary of either assessment.
Start using Paarify