Comment by freshnode

3 days ago

Looks nice - really - but I wouldn't touch you till you got external validation of your security practices and shared more about what you do there on your FAQs. Encrypting access tokens is just table stakes. My finances are private and not to be trusted with just anyone. The folks you compare yourself to have that type of certification but it's not listed in the comparison.

Even a SOC type 1 would show you're on the journey.

3 comments

freshnode

Reply
_wesley  3 days ago

Thanks, that's fair. No SOC 2 yet, but I understand if that's a dealbreaker. I will expand the FAQs/Comparison pages to make that clear.

  • Onavo  3 days ago

    I would tell you to ignore that and do the exact opposite. You are targeting B2C. Avoid the hacker news crowd they are not worth the trouble for this sort of thing. It's a distraction and if you believe the product advice here companies like Dropbox won't exist because FTP is a thing.

    You need to spam growth and marketing. Your landing page is horrible (too boilerplate, too vibe coded, no graphics. Some pages have horizontal overflows on mobile. https://stoke.money/compare/simplifi). Redo it. Run ads and pay Tiktok influencers and YouTubers.

    Standard consumer SaaS security is more than enough for this sort of product. Your users won't know the difference between end-to-end encryption and encryption at rest and while you are nitpicking based on hacker news power user feedback others would eat your lunch already.

    If you are a US fintech, monetizing consumer user data is par for the course. Do what you will with that information but just know that your competitors don't simply make money from subscriptions alone.