Security
Built to protect what you're growing.
A gift meant for someone's future has to be safe for years, not days. Here's how Bloomi protects your account, your money, and your personal information.
Encrypted end to end
Every connection to Bloomi uses TLS 1.2+, and personal and account data is encrypted at rest with AES-256.
Identity verification
Accounts are verified before a gift can be invested, which keeps impersonation and account takeover attempts out.
Account protection
Multi-factor authentication, biometric sign-in on mobile, and alerts whenever sensitive account details change.
24/7 fraud monitoring
Automated monitoring flags unusual sign-ins and transfers, and suspicious activity is held for review before it settles.
Regulated partners
Money and securities are held by licensed brokerage and custody partners in accounts kept separate from Bloomi's own funds.
Least-privilege access
Internal access is limited to what a role needs, logged, and reviewed. No Bloomi employee can move your money for you.
How you can stay safe
Security works best as a partnership. These habits make your account far harder to compromise.
- Use a long, unique password for Bloomi that you don't use anywhere else.
- Turn on multi-factor authentication and keep your recovery method up to date.
- Bloomi will never ask for your password, one-time code, or full ID document by email or phone.
- Check that links point to bloomi.group before you sign in, and report anything that looks off.
- Keep your phone and browser updated so the latest security fixes are in place.
Common questions
Is my money safe if something happens to Bloomi?
Invested gifts are held at regulated custody partners in accounts segregated from Bloomi's own balance sheet, so they are not ours to spend and remain yours if Bloomi were to wind down.
Can I lose money?
Yes — investing involves risk, including possible loss of principal. Security protects your account from unauthorised access; it does not protect against market movements.
Who can see my personal data?
Only the people and partners who need it to run your account. We don't sell personal information. Details are in our Privacy Policy.
How do I report a security issue?
Email security@bloomi.group with what you found and how to reproduce it. We review every report and respond to valid submissions.
Report a security issue
Found a vulnerability or something that doesn't look right? Tell us and we'll investigate. Please give us a reasonable window to fix issues before disclosing them.
security@bloomi.groupBloomi is pre-launch. This page describes the security practices we build to; it is not a guarantee against all risk. Investing involves risk, including possible loss of principal.