Security
Built to be trusted with your money
You are handing us the two bills you cannot afford to miss. Here is exactly how your funds are held, how your data is protected, and who has independently checked our work.
SOC 2
Independently audited
AES-256
Encryption at rest
FDIC
Insured banking partner
Zero
Bank logins stored
Your money
Where the funds actually sit
Easy Impound is not a bank and does not hold deposits. Your money is held at our FDIC-insured Sponsor Bank and is ring-fenced to the bills you enrolled.
Held at an FDIC-insured bank
Collected funds sit in accounts at our Sponsor Bank, OMB Bank, not with Easy Impound. We are a technology and payment-servicing company; we do not hold customer deposits.
Used for one purpose only
Your money pays the property tax and insurance obligations you enrolled. It is not used for anything else, and it is not lent out or invested.
Itemised, not summarised
Every collection and every disbursement is itemised in your dashboard, with the payee and the amount, so the ledger always reconciles to your bills.
Yours to withdraw
You can access your funds at any time by cancelling. On cancellation, your balance is returned within seven to fourteen business days.
Your data
How your information is protected
Encryption is the floor, not the whole story. What matters as much is how few systems and people can reach your records at all.
Encrypted in transit and at rest
Traffic to and from the platform runs over TLS. Stored data is encrypted at rest with AES-256. That is what “bank-level encryption” means in practice — the same standards financial institutions are held to.
We never receive your bank login
Bank connections run through Plaid. You sign in to your bank inside Plaid’s own secure flow, and Easy Impound receives a token — never your username, never your password. There are no banking credentials in our systems to steal.
Access is least-privilege and logged
Access to customer records is restricted to the staff and systems that need it to run the service, and access is logged. No one browses customer data casually.
No card data, ever
Payments move by ACH through the Sponsor Bank. We do not collect or store payment card numbers, so there is no card data in scope on our side.
Independently checked
Not just our word for it
The controls above are audited, and the highest-risk checks are run by specialists rather than built in-house.
SOC 2 audited
Easy Impound has completed a SOC 2 examination by an independent auditor. The report is available to partners and enterprise customers under NDA on request.
Identity verification by Persona
Onboarding identity checks, government-ID verification, sanctions and watchlist screening run through Persona Identities, Inc. rather than a home-built process.
Transaction monitoring by ComplyAdvantage
Ongoing transaction monitoring, anti-money-laundering screening and Bank Secrecy Act support run through ComplyAdvantage.
Vendors under contract
Every service provider that touches customer information is contractually required to maintain confidentiality and appropriate security standards.
Commitments
What we will never do
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioural advertising.
- We do not use your data to market unrelated products to you.
- Insurance Marketplace participation is opt-in only, and providers may not reuse or resell what they receive.
If a data breach ever affected your personal information, we would notify you in line with the state and federal breach-notification laws that apply to you. Our full data practices, retention periods and your rights by state are set out in the Privacy Policy.
Questions from a security or compliance team?
We are used to these reviews. Email us and we will send what your team needs, including the SOC 2 report under NDA.
Request security documentationPrivacy and data-rights requests: privacy@easyimpound.com
Keep your capital. Keep the protection.
Easy Impound handles your property taxes and insurance without lender-held reserves.
Get Started