--- title: "Security at Topkey | Topkey" description: "How Topkey protects customer data: encryption, MFA, daily backups, yearly penetration tests, continuous monitoring and a SOC 2 Type 2 audit in progress." canonical: "https://topkey.io/security" language: "en" --- # Security at Topkey. Your financial data is the business. Here is how we protect it, and where to find our policies, uptime and audit reports. ## How we protect your data - **Encryption.** Data is encrypted in transit (TLS 1.2 or later) and at rest, using the managed encryption of our cloud and database providers (AWS and PlanetScale). - **Access control.** Multi-factor authentication is enforced for Topkey staff on Google Workspace, GitHub, AWS and our production hosting accounts. - **Backups.** Databases are backed up automatically every day, and restores are tested periodically. - **Penetration testing.** An independent third party tests Topkey every year. - **Continuous monitoring.** Our infrastructure controls are monitored continuously through Oneleet. - **Reporting a concern.** Email [security@topkey.io](mailto:security@topkey.io) and we will respond. ## SOC 2 Type 2 Topkey's SOC 2 Type 2 audit is in progress. Once the report is issued, it is available on request through our [Trust Center](https://trust.topkey.io/). ## Where to look - [Trust Center](https://trust.topkey.io/): our security policies and the list of sub-processors. - [System Status](https://status.topkey.io/): uptime and incident history. - [security@topkey.io](mailto:security@topkey.io): security questions and reports. [SOC 2 Type 2 audit in progress, monitored by Oneleet. Opens the Topkey Trust Center.](https://trust.topkey.io/) ## See the Topkey difference. ## Disclosures \*Topkey is a financial technology company and is not an FDIC-insured bank. Banking services provided by Thread Bank, Member FDIC. FDIC Insurance available for funds on deposit through Thread Bank, Member FDIC. FDIC deposit insurance covers the failure of an insured bank. Certain conditions must be satisfied for pass-through deposit insurance coverage to apply. The Topkey Visa debit card is issued by Thread Bank, Member FDIC, pursuant to a license from Visa U.S.A. Inc. and may be used anywhere Visa cards are accepted. The Topkey Visa charge card is issued by Thread Bank, Member FDIC, pursuant to a license from Visa U.S.A. Inc. and may be used anywhere Visa cards are accepted. Accounts are eligible for pass-through deposit insurance only to the extent pass-through insurance is permitted by the rules and regulations of the FDIC, and if the requirements for pass-through insurance are satisfied. There may be a risk that pass-through deposit insurance is not available because conditions have not been satisfied. In such cases, funds may not be fully insured in the event the insured depository institution where the funds have been deposited were to fail. \*\*Your deposits qualify for up to $3,000,000 in FDIC insurance coverage when Thread Bank places them at program banks in its deposit sweep program. Your deposits at each program bank become eligible for FDIC insurance up to $250,000, inclusive of any other deposits you may already hold at the bank in the same ownership capacity. You can access the terms and conditions of the sweep program at https://thread.bank/sweep-disclosure/ and a list of program banks at https://thread.bank/program-banks/. Please contact customerservice@thread.bank with questions on the sweep program. Pass-through insurance coverage is subject to conditions. 1 | The interest rate on the High Yield Deposit Account will be 2.93% with an Annual Percentage Yield (APY) of 2.97%. The interest rate on the Regular Deposit Account will be 1.52% with an Annual Percentage Yield (APY) of 1.53%. These rates are effective as of 9/17/26. These are variable rates and are subject to change after the accounts are opened based on the Federal Funds Rate. Minimum opening deposit and average balance requirements may apply. Fees could affect earnings on the account. Topkey does not provide tax, legal, or accounting services. All information on this site is for educational purposes only.