
Read-only, by design.
Tarn can see your balances and transactions. It can never move money, and it never sees your bank login. Here is how the rest of your data is looked after.

Where your data goes, and where it can’t.
Four stops, each with one job. Money only ever moves inside your bank, never through Tarn.
The practices behind it.
What we do today, written plainly. Your IT team can ask for the detail behind any of it.
See every sign-in and export.
Owners get a full activity log: who signed in, from where, what they changed and what left the workspace.
2-step
Authenticator app or security key, for every role.
Sessions
Sign out a lost laptop from Settings in one click.
12 months
Activity history kept, exportable at any time.

Doing a vendor review? Tell us what you need and we will send the documents, usually within two working days.
Security overview
Data processing agreement
Subprocessor list
Your questionnaire
Or write to













