Why you should trust Ernest?
Ernest Limited is registered as a Data Controller with the Information Commissioner's Office with registration number ZA198396, and we adhere to the strict provisions of the Data Protection Act 1998 and other relevant data protection regulations.
Corporate Security Policies & Procedures
Physically, all of your data is held within the EU. Ernest's physical infrastructure is hosted and managed within Amazon's secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards, including an SSAE 16 certification. For more information on Amazon's security processes, please visit aws.amazon.com/security.
Data Security, Encrypted Data & Communications
We take your data security extremely seriously and adhere to the most rigorous industry standards. We use a database to store transactions data (e.g., timestamp, amount,description). The database is hosted by Amazon and encrypted using the industry standard AES-256 encryption algorithm. All traffic on Ernest runs over industry-standard SSL/HTTPS for encrypted communication (256-bit AES). This is the same end-to-end 256-bit SSL encryption used by all major banks across the world.
We look through your bank transactions but we can't execute any order. We act as a smart conversational interface layer above your bank accounts. Ernest is a read-only application, which means it cannot be used for withdrawals or payments. Not even you could move your money through Ernest!
No User Password
We do not store your bank login credentials anywhere in our system, as we never have access to them.
Here's how it works: your bank login credentials are passed directly to our third party partner, SaltEdge, who safely stores it and provides us with the data (but not login information) that we need to offer our service.
SaltEdge is a global leader in providing financial services data; they adhere to the highest bank levels of security, more can be found here. The balance and transaction data is supplied by SaltEdge who sends our servers the information via secure and encrypted connections - your data is always encrypted. SaltEdge stores your bank login credentials in order to refresh your latest bank data for Ernest. Ernest does not store your bank login credentials.
Close Account and Delete Everything
You can close your Ernest account at anytime, in which case all your personal information is deleted and the connections with your bank are permanently deleted.
Contact & Visit us
We know that handling your financial information means you're putting your trust in us, which is why we will answer any questions you may have. Please contact us at firstname.lastname@example.org, or alternatively call us directly at +442070971544 and have a live chat, or you can even setup a visit to meet our team at our registered office.
Want to report a security concern?
Email us at email@example.com.
Last Modified: October 12, 2016