Security
Last updated : 22 October 2026
Hosted in Morocco
The application, the database, the documents and the backups are hosted in Morocco, in the Oracle Cloud Casablanca region. The processing entrusted to service providers outside Morocco (artificial intelligence, WhatsApp, Gmail) is described in our privacy policy. An installation on your own servers is possible under licence.
Encryption
Communications between your browser and our servers are encrypted with TLS (versions 1.2 and 1.3). The secrets you entrust to us (connector credentials, keys, mail passwords, Gmail authorisation) are encrypted with AES-GCM, and daily backups with AES-256.
Authentication
Login by e-mail and strong password, stored as a hash (BCrypt), two-factor authentication by code, account lockout after 5 failures within 15 minutes, and automatic termination of inactive sessions.
Your bank transactions
Tresoria reads your transactions and balances from the statements you import or the connectors you configure. Tresoria never asks you for your online banking credentials.
On-premises deployment
For the most demanding groups (banks, mutuals, public sector), Tresoria can be deployed on your own infrastructure.
Access by our team
A member of our team accesses your workspace only with your agreement, for a limited period, and each of their actions is recorded. To handle an incident, Tresoria's founders may intervene without prior agreement; each access is recorded.