Your clients trust you with their data. You can trust us with it.
Tax records, investment accounts and money held in trust need serious protection. These are the safeguards we build into every Yoo product and custom system.
Protection on every Yoo system Active
Encryption everywhere
Data is encrypted in transit with TLS 1.2 or higher, and sensitive data is encrypted at rest with AES-256.
Isolated customer data
Each firm's data is kept separate from every other firm's, so one customer can never see another's records.
Two-factor sign-in
Optional two-factor authentication by email or text message code, plus role-based permissions for every user.
Audit trails
Sensitive actions are logged with who did what and when. Key financial actions can require two-person approval.
Encrypted backups
Regular encrypted backups stored separately, so your data can be restored if something goes wrong.
Hardened applications
Security headers, rate limiting, anti-forgery protection, least-privilege database access and regular security reviews.
Built with privacy laws in mind
Our products are designed to support your obligations under Canadian and US privacy and financial rules. You control who sees what, and you own your data.
- Designed to support PIPEDA requirements in Canada
- Aligned with IRS Publication 4557 safeguards for US tax data
- FINTRAC record-keeping support in Amortivo
- Your data is yours, with exports available on request
What you control
Security questions
Where is my data stored?
Our products run on reputable cloud providers with encrypted storage. Ask us about the hosting region for the product you're interested in.
Can my staff only see what they need?
Yes. Role-based permissions control what each person can see and do, and client-facing portals only show clients their own information.
How do I report a security concern?
Please contact us through our contact page and mark it as a security concern. We treat these reports as a priority.
Have a security review to complete?
We're happy to answer your security questionnaire or walk your IT team through how we protect data.