Stewardship is the product.
Avin treats your money like an inheritance, not a metric. Here is the security architecture — every layer, named.
Six layers between an attacker and your value.
Identity
Biometric login bound to a device only you carry. No passwords to phish, no SMS to intercept.
Authorisation
Every monetary action signed on-device with a hardware-backed key — even from inside the app.
Encryption
AES-256 at rest, TLS 1.3 in transit. Keys live in FIPS-validated HSMs.
Monitoring
Behavioural and network anomaly detection runs in real time, with approve-from-lock-screen prompts.
Infrastructure
Multi-region active-active. Isolation by tenant. SOC 2 Type II controls audited annually.
Custody
Allocated metal in audited vaults. Qualified, bankruptcy-remote custodians for digital assets.
Real accounts, locally licensed.
Avin is a financial technology company. Banking, custody, and money-transmission services are provided by licensed partners in each region we serve.
United States
Banking services through US-chartered partner institutions. FDIC coverage on eligible balances up to applicable limits.
European Union
Accounts and IBANs through EU-licensed EMI and credit institutions, subject to national deposit-insurance schemes.
United Arab Emirates
UAE IBANs and AED services through partners licensed by the Central Bank of the UAE.
Specific partner names and licence references are listed in the in-app legal disclosures, updated whenever the licensing chain changes.
Independently audited. Continuously.
SOC 2 Type II
Operational controls audited annually by an independent CPA firm.
PCI-DSS Level 1
Highest tier for handling cardholder data — assessed yearly.
ISO/IEC 27001
Information security management certified across the organisation.
GDPR & UK DPA
Privacy program with DPO, DPIAs, and data-subject rights tooling.
A real human, in an hour.
Fraud claims open a 24/7 incident channel staffed by humans, with eligible balances temporarily protected while we investigate. No tickets that disappear, no scripted hold music.
Report from lock screen
Tap 'this wasn't me' on any notification — the affected card or rail is frozen instantly.
Provisional credit
Eligible disputed amounts re-credited within 2 business days while we investigate.
Full audit trail
A receipt of every event, who saw what, and when. Exportable for your records.
Your data is yours.
Avin does not sell your data and does not run ad networks. Your transactions are processed to deliver the service, not to profile you for third parties.
You can export your data, restrict analytics, and delete your account from inside the app. Where law requires retention, the legal basis is named and the period is finite.