Secure Mobile App with Biometric Authentication for a Financial Advisory Platform

Overview

Built a secure iOS and Android app for a financial advisory platform giving clients access to account statements, portfolio performance, and secure messaging with their advisor from their phone. The app uses device-level biometric authentication alongside encrypted local storage, so sensitive account data never sits unprotected on a client's device. This mattered because the platform's clients expected the same convenience as consumer banking apps, but the advisory's compliance obligations meant convenience couldn't come at the expense of data protection. We worked with the platform's compliance team to define exactly what data could be cached locally versus what always required a live, authenticated connection. Clients of a financial advisory platform expected the same mobile convenience as consumer banking apps, but the platform's compliance obligations meant that convenience couldn't come at the expense of data protection. We built a secure iOS and Android app using device-level biometric authentication and encrypted local storage, working with the platform's compliance team to define exactly what data could be cached locally versus what always required a live, authenticated connection. We worked with the platform's compliance team early to define exactly what data could be cached locally versus what always required a live connection, before designing the app's data architecture around those rules. It was tested against the compliance team's own review criteria before release. Clients got the mobile convenience they were requesting while the platform's compliance team confirmed sensitive data remained appropriately protected — proving the two goals didn't have to be in tension.