Worthic is designed to protect your financial information using a combination of account security, access controls, encrypted connections, and managed infrastructure protections.
Your account is protected by authentication, and workspace access is controlled through roles, permissions, and scopes. This means workspace owners can decide who can access a workspace, what they are allowed to do, and which reporting lines, accounts, documents, or areas they can see. Access can be changed or removed when needed.
Data sent between your browser or device and Worthic is protected using TLS, the standard encryption used for secure web traffic. Worthic also relies on managed infrastructure providers for storage and database services. Where applicable, data benefits from provider-managed encryption at rest, including services such as Render Postgres and Cloudflare-managed storage or infrastructure.
Worthic uses two-factor authentication through your Worthic mobile companion app to further protect your account from sensitive actions, such as certain workspace and account-related actions and management of integrations and connections. To help ensure data and account security, download the mobile app and register your device for 2FA biometric and PIN security.
Security also depends on how the system is used. You should use a strong password, protect your email account, avoid sharing login details, and only invite people you trust to your workspace. If you manage client data, you should also follow your professional and regulatory obligations around confidentiality, consent, retention, and access control.
In short: Worthic uses modern security foundations, but good workspace hygiene and careful user access management remain essential.