Modo Insight is operated by Axiom Digital Systems Ltd, providing regulated Open Banking account information services through an FCA-authorised provider under the Payment Services Regulations 2017.
How your bank connection works
Modo Insight connects to your bank using the UK Open Banking standard, regulated by the FCA. We never see or store your bank username or password — authentication is handled entirely by your bank. Once connected, Modo has read-only access to your transaction history and balances. We cannot initiate payments or move money on your behalf.
Encryption & data security
Encryption at rest
AES-256-GCM
All stored financial data is encrypted using AES-256-GCM before writing to the database.
Encryption in transit
TLS 1.3
All connections between your device, our servers, and Open Banking providers use TLS 1.3.
Backend hosting
Azure UK West
Our API runs on Azure App Service in the UK West region.
Database hosting
AWS London
Database hosted on Supabase in AWS eu-west-2 (London). All data remains in the United Kingdom.
Data purge & consent revocation
You are in control of your data at all times. You can disconnect any bank connection at any time from within the Modo app (Settings → Manage Connections → Disconnect). All associated Open Banking data — transaction history, balances, and access tokens — is permanently purged within 72 hours of disconnection, in line with FCA requirements.
Regulatory & compliance status
FCA authorisation: Axiom Digital Systems Ltd provides regulated Open Banking account information services through an FCA-authorised Account Information Service Provider under the Payment Services Regulations 2017.
ICO registration: Axiom Digital Systems Ltd is registered with the Information Commissioner's Office under registration number ZC112218.
Cyber insurance: We maintain Hiscox Cyber & Data insurance (policy PL-PSC10003943091/00) covering data breach, cyber incident response, and third-party liability.
Your rights
You have the right to access, correct, or erase your personal data at any time. To exercise any UK GDPR data rights — including access, erasure, or portability — contact our Data Protection Officer at dpo@axiomdigital.systems. We respond within 30 days.
Questions or concerns?
Axiom Digital Systems Ltd
167-169 Great Portland Street, 5th Floor, London, W1W 5PF