wlbrOpening your next page
No “bank-grade” adjectives. Here is exactly how your account, your data, and your money are protected - and the partners behind each layer.
Every payment is authorised inside your own banking app via open banking (Akahu). We never see, store, or transmit card numbers - there are no card details to steal, and no chargebacks.
Your sign-in lives in an HTTP-only, Secure, SameSite cookie - invisible to page scripts and never stored in localStorage. Email verification is required, and you can require an emailed one-time code as a second sign-in step.
Bank account numbers are encrypted before they touch the database. Private escrow links (status and release URLs) are stored only as hashes - the link itself is the secret, so even our own database can't leak a usable one.
Money leaving the trust account passes a review queue, and larger payouts require a second, different staff approver before they can be paid. Every movement is written to an append-only, hash-chained ledger, automatically re-verified every six hours, with balance and double-entry integrity checked daily.
Rate limiting and bot protection sit on sign-up, checkout creation, and every public form, so the same protections that guard your money also guard your inbox.
wlbr is a registered NZ financial service provider (FSP1012829) and a member of FSCL, an approved independent dispute resolution scheme (registration 9690) - free for you to use if we ever can't resolve something ourselves.
Named partners
Tell us through support and it goes straight to the engineering team. For how your money is protected day-to-day, see the trust page - or watch the ledger prove it live.