Your financial data is protected
We use bank-level security measures to keep your financial information safe. Multiple layers of encryption, secure infrastructure, and continuous monitoring protect your data 24/7.
Security Features
Multiple layers of protection for your peace of mind
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Encrypted database backups
- Secure key management system
- Bcrypt password hashing (10+ rounds)
- OAuth 2.0 for third-party login
- Short-lived JWT tokens (15 min)
- Automatic token rotation
- SOC 2 compliant cloud hosting
- Regular security audits
- DDoS protection
- 24/7 threat detection and monitoring
- Daily automated backups
- Point-in-time recovery
- Multi-tenant data isolation
- Secure data deletion protocols
Security Practices
How we maintain security across all operations
Secure Development
We follow secure coding practices, conduct code reviews, and run automated security scans on every deployment.
Access Control
Strict internal access controls with role-based permissions, audit logging, and principle of least privilege.
Monitoring & Logging
Real-time security monitoring, automated alerts for suspicious activity, and comprehensive audit trails.
Regular Updates
We promptly patch vulnerabilities, keep dependencies updated, and continuously improve our security posture.
Compliance & Certifications
We meet industry standards and regulatory requirements
- GDPR compliant (EU data protection)
- SOC 2 Type II certified
- PCI DSS compliant (via Stripe)
- Regular third-party security audits
- Annual penetration testing
- Data Processing Agreements available
Responsible Disclosure
If you discover a security vulnerability, please report it responsibly. We appreciate the security research community and will work with you to address any issues promptly.
We commit to acknowledging reports within 48 hours and providing updates throughout the resolution process.
Protect Your Account
Best practices to keep your account secure
Use a Strong Password
Create a unique password with at least 12 characters, including uppercase, lowercase, numbers, and symbols. Consider using a password manager.
Beware of Phishing
We'll never ask for your password via email. Always verify the URL is duukoe.com before entering credentials. Report suspicious emails to security@duukoe.com.
Keep Devices Secure
Install security updates promptly, use antivirus software, and avoid accessing Duukoe on public or shared computers.
Log Out When Done
Always log out after using Duukoe, especially on shared devices. You can also remotely log out from all devices in your account settings.
Ready to track expenses securely?
Join thousands who trust Duukoe to protect their financial data with enterprise-grade security.