Security
Last updated June 11, 2026
Security is how MapleTrack is built, from the database up. Here is how we protect your money data.
01Encryption
Traffic is served over HTTPS. All user data is encrypted at rest, not just secrets. Secrets are validated, injected at runtime, and never committed or logged.
02Row-level isolation
Every household-scoped query is enforced at the database with row-level security, not just hidden in the UI. One household can never read another.
03Authentication
Passwords are hashed. Optional two-factor authentication via an authenticator app protects every sign-in.
04Payments
Card payments are handled by Stripe. We never see or store your full card number. Webhooks are signature-verified.
05Reporting
Found a vulnerability? Email security@mapletrack.ca and we will respond promptly.