Strum works with your financial data, so here's what you should know about how it's protected. The full version is on the strum.capital/security page.
In short
- Strum is not a broker, a bank or an investment adviser. It doesn't make trades on your behalf.
- Strum doesn't store your full card number or CVV. You enter your card on the payment provider's page, plata by mono (monobank).
- Strum doesn't get your broker or bank password. You sign in to your broker on the side of Plaid, SnapTrade or the broker itself.
Where your data is stored
The database and sign-in run on Supabase: data is encrypted at rest (AES-256) and in transit (TLS). Strum's backend is hosted at Hetzner. Both providers hold security certifications (SOC 2 Type 2, ISO 27001).
Strum doesn't have its own SOC 2 or ISO certification. Strum relies on its providers' secure infrastructure and is responsible for its own code and access.
Is it safe to connect my broker
Yes. The connection is read-only: Strum sees positions, balances and transactions, but it can't buy, sell or withdraw money. Plaid and SnapTrade have SOC 2 certifications.
The Monobank and AI assistant (MCP) connections are read-only in the same way.
Cookies and analytics
Google Analytics, Microsoft Clarity and Meta Pixel load only after you give consent in the cookie banner. You can change your choice in your profile → "Cookie settings".
Noticed a security issue?
Email strum.yuinvest@gmail.com. Describe the page, the steps and when it happened, and add screenshots. Don't send passwords, secret keys or card details.