Skip to main contentSkip to footer
Security & Data Privacy

Bank-level security.
Nothing less.

Famli connects to your accounts through the RBI-regulated Account Aggregator framework, the same system your bank already trusts. We never see your passwords, and you decide exactly what's shared, with whom, and for how long.

ISO 27001 Certified SEBI-Registered IA · INA000021979 RBI-Regulated Account Aggregator Framework

Encrypted end-to-end, with a secure structure that keeps your identity and wealth separate

Live data flow

How your data moves, step by step.

The same architecture your bank already trusts: you give consent once, a regulated intermediary handles the rest without ever handing Famli your credentials, and your consolidated view is ready for you inside the Famli app.

YOUR BANK
Financial Information Provider
Banks · NBFCs · Mutual Fund and Insurance Companies
Secure, encrypted
connection
RBI-APPROVED
ACCOUNT AGGREGATOR
Routes consent and data. Reads none of it.
Secure, encrypted
connection
FAMLI
Financial Information User
Consolidates your view. Never sees your credentials.
1
Give consent
You authorise sharing, on your terms, inside the Famli app.
2
Famli requests data
Famli asks the Account Aggregator for what you approved.
3
AA requests your bank
The Aggregator asks your bank for it, via secure open APIs.
4
Data flows back, encrypted
Your bank returns it to the Aggregator, which passes it on to Famli, still encrypted.
5
You see it, in Famli
Your consolidated view is ready, waiting for you in the app.

The Account Aggregator only ever routes your consent and your data. It cannot read, store, or sell either, and Famli only decrypts what falls inside the scope you approved.

Trust pillars

Five things standing between your data and everyone else.

Data security isn't a feature we bolt on. It's how the connection to your accounts is built from the ground up.

Bank-level encryption

Your data is encrypted in transit and at rest, the same standard your own bank's app relies on.

Account Aggregator framework

Every connection is verified by your bank through the RBI-regulated AA framework. Famli never touches your passwords.

ISO 27001 certified

Independently audited against the global standard for information security management.

You control what's shared

Choose exactly which accounts, for how long, and which family members can see them.

SEBI-registered

Famli operates as a SEBI-registered Investment Adviser (INA000021979), regulated under Indian law.

How your data actually moves

Your data flows through the RBI Account Aggregator framework, not directly to Famli.

Four parties, one consent, zero passwords. Here's exactly what happens when you connect an account.

You 01
Choose accounts to connect

Inside Famli, you select which bank accounts, FDs, loans, or investment accounts you'd like to see in your unified view.

Famli (FIU) 02
Requests consent via the AA

Famli, the Financial Information User, asks the Account Aggregator to raise a consent request, specifying exactly what data, for how long, and why.

Account Aggregator 03
You approve, on your terms

You review and approve the request directly with the RBI-regulated AA, not with Famli. Nothing moves without your say-so.

Consent-based
Your bank (FIP) 04
Verifies and shares, encrypted

Your bank shares the approved data with the AA in encrypted form. The AA passes it straight through to Famli. It's a conduit, not a viewer.

End-to-end encrypted

The Account Aggregator is data-blind by design. It can route your consent and your data, but it cannot read, store, or sell either. Famli only decrypts what falls within the scope you approved.

Frequently asked

Security & data privacy, straight answers.

The questions families ask us most before connecting their first account.

It's an RBI-regulated system that lets you share financial data between institutions with your explicit, revocable consent, instead of handing over your net banking login. Famli connects to your accounts as a Financial Information User (FIU) through this framework, not as the Account Aggregator itself.
No. Famli never asks for, stores, or has access to your net banking credentials. Authentication happens between you and your bank through the AA, entirely outside Famli's system.
No. Famli is view-only. It consolidates and displays your financial data, and cannot initiate a transfer, payment, or transaction of any kind.
Yes. Data is encrypted in transit through the AA framework and at rest within Famli, using bank-level encryption standards, the same category of protection your bank's own app uses.
No. Famli is a Financial Information User (FIU) that connects through the RBI-regulated Account Aggregator framework. The AA is a separate, licensed entity that routes consent and data between your bank and Famli.
Only the family members you explicitly invite, and only the specific accounts or goals you choose to share with each of them. Nothing is visible by default.
Yes. Famli is a SEBI-registered Investment Adviser (INA000021979), and every data connection runs through the RBI-regulated Account Aggregator framework, so both the advisory side and the data side sit under Indian financial regulation.
ISO 27001 is a global standard for information security management. Being certified means Famli's data-handling practices, from storage to access controls, have been independently audited against it.
Yes, at any time. Consent given through the AA framework can be reviewed and withdrawn whenever you choose, which stops any further data from being fetched.
You can request deletion of your account and associated data at any time, handled in line with applicable data protection regulations.
ISO 27001
Certified information security
SEBI-Registered IA
INA000021979
RBI Account Aggregator
Framework-based data access
Bank-grade encryption
In transit and at rest

Famli Technology Products Pvt. Ltd. · SEBI-registered Investment Adviser (INA000021979) · ISO 27001 certified · Connects via the RBI-regulated Account Aggregator framework.