Security & Privacy
Your affairs stay yours.
Security here is layered, tested and deliberately unglamorous. This page explains, in plain language, how we protect your money and your information — and what we will never ask of you.
How we protect you
Layered, so nothing depends on one thing being perfect.
No single control carries the weight. Each layer assumes the one before it could fail, and stands ready anyway.
Encryption, in transit and at rest
Everything that moves between you and the bank travels encrypted, and everything stored is encrypted again where it sits. Anyone intercepting the wire, or the disk, reads nothing legible.
Strong authentication
Access to your relationship is gated by more than a password — strong authentication, with biometrics where your device supports them. A password alone opens nothing that matters.
Restricted internal access
Inside the bank, your information is available to the people working on your relationship and to no one else. That access is granted narrowly, logged, and reviewed.
Continuous monitoring
Accounts and systems are watched for anything out of pattern, around the clock. When something looks unusual, a person examines it — and if there is any doubt, we pause and speak with you first.
Your information
Handled like the original document.
Long before banking was digital, a private bank kept one copy, knew where it was, and knew who had touched it. The medium changed. The discipline did not.
Need-to-know access
The people serving you see what the task in front of them requires. Curiosity is not a permission, and seniority is not one either.
Never sold, never marketed
Your information is not sold, and it is not shared for marketing. It moves only where the service you asked for, or the law, requires it to.
Deleted when no longer required
Records are kept for as long as our obligations demand, and then removed. Retention has an end date — not a default of forever.
Contact conduct
How we will — and will never — contact you.
Knowing our habits is a protection in itself. A message that breaks these rules is not from us, however convincing it looks.
We will
- Contact you through channels you already know — the platform's messages, your banker's usual number, or the WhatsApp desk published on this site.
- Give you time. A genuine instruction can always wait while you think, or while you check with us.
- Wait, without complaint, while you hang up and call back on the number you already have. Verifying us is not rude — it is exactly what we would advise.
We will never
- Ask for your full password, your PIN or a one-time code — not by phone, message or email. No one at Taviora needs them, ever.
- Press you to act immediately, or ask you to keep a request quiet from your banker or your family.
- Ask you to move money to a “safe account”, install remote-access software, or hand a card or cash to a courier.
If something feels wrong
Three steps, in order.
Pause and keep the evidence
Do not act on the request. Keep the message, number or email exactly as you received it — it helps us establish what happened.
Reach us on a channel you trust
Contact the private desk directly, using the details you already have or the ones on this page — not any details the message gave you.
We take it from there
We confirm what is genuine, secure your access if anything needs securing, and tell you plainly what happens next.
Reach the private desk
A person answers, and stays with the matter until it is resolved. No queue, no case number read back to you.
We describe our controls in plain language rather than badges. [Formal security certifications pending verification]
Questions about security?
Ask anything on this page, or anything it should have covered. Plain answers, from a person.