We understand that the security of your financial information is crucial. That’s why we’ve built our platform with top-tier security features to ensure your data is safe, your transactions are secure, and your money is protected.
All data entered into our application is securely stored within Amazon AWS data centres located in the EU, backed by industry-leading certifications like ISO 27001, and Google, meeting strict security requirements. Learn about Data Centre controls at AWS and Google here:
Amazon AWS: https://aws.amazon.com/compliance/data-center/controls/
Google: https://www.google.com/about/datacenters/data-security/
Expend operates under full FCA licensing in the UK and European Economic Area through our partnership with Prepaid Financial Services Limited (PFS), ensuring we adhere to the highest financial security standards.
Expend is fully compliant with GDPR. We prioritise your privacy, and all data handling meets strict security requirements.
The 3D Secure Protocol adds an extra layer of protection to online payments with authentication through push notifications, biometrics, or unique codes.
We use two-factor authentication (2FA), requiring both a password and an additional identifier to login to the mobile app and web dashboard, for enhanced security.
Our mobile app uses biometric authentication, like FaceID on iOS, for secure and convenient access.
With over 99.99% uptime, we’re ready when you are, thanks to premium partnerships, robust recovery protocols, and cutting-edge cloud technology.
Your data belongs to you. We safeguard it, never share it, and make it easily accessible whenever you need it. Our staff receive accredited training in data protection best practices.
We control employee access with SAML Single Sign-On (SSO) portals and enforce mandatory 2FA processes from our SAML provider, providing additional layers of security to your data.
What employee security awareness and training programs are in place?
All new and current Expend employees undergo regular comprehensive data security and privacy training and participate in internal phishing tests, powered by KnowBe4. We also have a dedicated internal communications channel to keep everyone informed about security best practices.
How does Expend protect against fraud?
Our fraud detection algorithm constantly monitors transactions, and we will notify you of any suspicious activity. Expend debit card users have access to Mastercard's Chargeback scheme, which allows them to request a refund on disputed transactions if needed. Some possible reasons for claiming a chargeback include the following:
Goods or services were not provided
Goods or services were not as described or defective, damaged or not suitable for its intended purpose
The merchant didn’t honour the terms and conditions of a contract
A processing error or other technical issue occurred
You were charged an incorrect amount or there were multiple charges
You were the victim of fraud
Where are the funds stored?
Expend is not a bank. Your funds are securely held in a segregated bank account with PFS. PFS is regulated by the FCA’s Electronic Money Regulations, which impose safeguarding requirements to protect customer funds. PFS is required to ensure funds are held in segregated bank accounts, separately from PFS’s own funds, and insulated against the claims of creditors in the event of PFS insolvency.
It's easy to use, and I like the linking to credit cards, meaning we don't have to add in as many details about each expense.