Vault22 is a regulated financial services provider in South Africa and the UAE. Bank connections are read-only, so we can't move money from your bank. Your data is encrypted, our security is independently audited, and your investments are held in your name.
Last updated:
Here's how Vault22 keeps your money and information safe when you use the app.
Access is read-only, so Vault22 can't move money, make payments or complete transactions from your bank account.
To update your accounts, we facilitate sign in to your bank on your behalf. That's why your bank may send you a one-time PIN.
Statements are encrypted when you upload them and while they're stored.
We only use them to build your financial picture, so you can see where your money goes.
Your data is encrypted in transit and at rest.
Staff access is limited to the people who need it for their role, protected by multi-factor authentication and monitored.
Your investments are held in your name, with ABSA Investor Services as custodian, separate from Vault22's own accounts.
Investing involves risk, and past performance doesn't guarantee future results.
Vault22 is licensed in both markets we operate in. You can check our status on each public register.
Authorised by the Financial Sector Conduct Authority (FSCA) as a financial services provider, FSP No. 55724, with Category I and II licences.
Check the FSCA registerRegulated by the Dubai Financial Services Authority (DFSA) in the DIFC, FRN F006841, with a Category 4 licence, Retail Client Endorsement and Islamic Window authorisation.
Check the DFSA registerOur security is checked by independent firms, so you're not relying on our word alone.
Our information security management system is certified to the international ISO/IEC 27001:2022 standard.
An independent auditor tests that our security, availability and confidentiality controls work over time, not just on one day.
Specialists try to break into our app and systems at least once a year. We fix what they find and track it to closure.
Our systems are scanned and rated from the outside, continuously, by an independent monitoring service.
For banks and partners: request our reports under NDA
Scammers often pretend to be banks and money apps. Here's how to spot them, and what Vault22 will never do.
Only sign in through the Vault22 app or vault22.com. Check the address before you type anything.
Messages that rush you to verify your account, claim a reward or avoid a penalty are a common scam.
Your bank sends a one-time PIN for you only. No one from Vault22 or your bank needs it.
Never install screen-sharing or remote-access apps for someone who calls you claiming to be from Vault22.
Use a screen lock, and a different password for your email, banking apps and Vault22.
Contact us through the Contact page before you act. You can report suspicious messages to us there too.
No. Access to your bank accounts is read-only, so Vault22 can't move money, make payments or complete transactions. Money only moves from your Vault22 wallet when you choose to invest.
When your accounts update, Vault22 signs in to your bank on your behalf to fetch your latest transactions, so you may get the same notifications you'd get signing in yourself. Never share that PIN with anyone.
Yes. Statements are encrypted when you upload them and while they're stored, and we only use them to build your financial picture.
In South Africa, 22seven Financial Services (Pty) Ltd is an authorised financial services provider regulated by the FSCA (FSP No. 55724). In the UAE, Vault22 Financial Ltd is regulated by the DFSA in the DIFC (FRN F006841).
In your name, with ABSA Investor Services as custodian, separate from Vault22's own accounts. Investing involves risk, and past performance doesn't guarantee future results.
If you get a suspicious message, contact us through the Contact page before you act. If you've found a security vulnerability, email security@vault22.com.
Create your free profile, link your accounts and see your whole financial picture. Choose a plan when you’re ready.
