Security

Blueconomy is built with security and data privacy as top priorities.

Access Control

Read-Only Access

Blueconomy only requests read-only access to your Stripe account. We cannot:

  • Initiate payouts or transfers
  • Change your Stripe settings
  • Modify any data in your Stripe account

Least-Privilege OAuth Scopes

We use the minimum OAuth scopes required to generate exports:

  • read_balance_transactions
  • read_payouts
  • read_charges
  • read_refunds
  • read_disputes

Data Storage

What We Store

We only store data necessary for:

  • Creating period-locked snapshots
  • Generating exports
  • Maintaining audit trails

Data Encryption

  • All data is encrypted in transit using TLS
  • Data at rest is encrypted using industry-standard encryption

Audit Readiness

Each export includes:

  • Reproducible Snapshots: Locked to specific periods
  • Logic Notes: Documentation of calculations
  • Transaction IDs: Traceable back to Stripe objects

This makes exports audit-friendly and review-ready.

Compliance

While we don't claim specific certifications, we follow security best practices:

  • Least-privilege access
  • Encryption in transit and at rest
  • Regular security reviews
  • Transparent data handling

Questions?

If you have security questions, please contact us at aman@theblueconomy.ai.