Security at Intentia
Application security review verified: 13 October 2026
How safe is the information I provide to Intentia?
When you use Intentia you share personal and financial details about a gift or loan towards a home deposit, and you sign documents that record your intentions. We treat that information as confidential, and we design and check the service with that in mind.
In October 2026 the Intentia application was put through an internal security review. The issues it identified that could have been used to reach other people's information were fixed and then re-tested. Following that verification, no exploitable external attack path was identified in the application components tested. That conclusion applies only to what was tested – see “What this review was, and was not” below.
What protects your information
Your account
Passwords are stored using a one-way password-hashing method, never in readable form. Repeated failed sign-in attempts are limited, and sign-ins use short-lived session tokens that are checked on every request.
Your answers and documents
Your questionnaire answers and documents are tied to you. Other users and anonymous visitors were refused access when this was tested, including for questionnaires started before an account was created.
Payments
Payment details can only be looked up by the signed-in owner of the matter, and a matter is only marked as paid by verified notifications from our payment provider.
Signing and inputs
Signing requires a personal code for each signer. Information you type is checked and safely handled before it is stored or placed in your documents, and the application was tested against common injection attacks.
What this review was, and was not
This was an internal, AI-assisted, pre-test application security review. It combined analysis of the source code, automated checks and testing of a locally running copy of the application using made-up data. It was not an independent penetration test or a security certification. Our live hosting and network infrastructure were outside its scope, and some lower-priority items it recorded remain open or have been deferred. No review can guarantee complete security.
The full public edition explains what was examined, how the review was carried out, and its limitations.
Read the full security reviewQuestions or concerns
If you have a question about security, or believe you have found a security problem, please contact us.