CITT

    Scan results

    Triodos Bankieren NL

    iOS

    Triodos Bank's official Dutch banking app, offering account management, payments, and Apple Wallet integration. Features biometric authentication and strong encryption for transactions.

    CITT SCORE
    90
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Triodos customers comfortable with analytics

    What It Means For You

    App usage and crash data is shared with Piwik PRO for analytics and Bugsnag for error reporting. Identity verification is handled by Fourthline, which processes identity documents and biometric data. Personetics receives banking behavior data to power personalized financial insights.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (6)

    Data Security

    1 total
    1 Medium

    Network Security

    2 total
    2 Medium

    Code Security

    1 total
    1 Medium

    Privacy

    1 total
    1 Low

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    FourthlineCore, FourthlineVision, PersoneticsCoreIos (Personetics), PiwikPROSDK (Piwik PRO), Bugsnag, TrustKit, Parley, SnapKit, Lottie, SwiftMessages, MarkdownKit, DeviceKit, BigInt

    Security Strengths

    • ✓Authentication tokens stored with kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly — strongest Keychain protection class
    • ✓Biometric-bound non-extractable key pairs used for login (LAContext + kSecUseAuthenticationContext)
    • ✓ThisDeviceOnly Keychain variants prevent credential extraction via device backup
    • ✓Chat messages encrypted at rest using CryptoKit AES-GCM (ParleyEncryptedStore)
    • ✓File system uses only NSURLFileProtectionComplete and NSURLFileProtectionCompleteUnlessOpen
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    biometric
    payments
    identity verification

    Package

    com.triodos.bankingnl

    Version

    5.3.0 (Build 743)

    Analysis Date

    Apr 9, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Very Secure

    Key Findings

    Data Security - 1 finding (1 medium)

    Network Security - 2 findings (2 medium)

    Code Safety - 0 findings

    Privacy - 1 finding (1 low)

    Privacy Concerns

    What Data is Collected

    The app collects data about app usage and interactions, device information, crash and error reports, identity documents for account verification, biometric data for identity confirmation, and banking activity patterns.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Piwik PRO - receives app usage and interaction data for analytics purposes
    • Bugsnag - receives crash and error data to monitor app stability
    • Fourthline - receives identity documents and biometric data for identity verification
    • Personetics - receives banking behavior data to generate personalized financial insights

    Understanding the Scores

    CategoryScore
    Security90/100
    Privacy91/100
    Data Security94/100
    Network Security92/100
    Code Safety95/100
    Data Collection93/100
    Data Sharing93/100
    User Control94/100

    Positive Security Features

    • None specifically identified in this analysis.

    Areas for Improvement

    • Some data stored on the device could benefit from stronger safeguards to limit exposure in edge cases.
    • The app's network communication configuration has minor gaps that, while low risk, could be tightened to meet the highest available security standards.
    • A small amount of behavioral data is shared with a financial insights provider; clearer in-app disclosure would give users more visibility into this sharing.

    About This Analysis

    This scorecard was generated by automated security analysis. Scores reflect the security and privacy posture of the app at the time of the scan.

    App Details

    FieldValue
    AppTriodos Bankieren NL
    Packagecom.triodos.bankingnl
    Version5.3.0 (Build 743)
    Scan Date2026-04-09

    Right of Reply

    Developer not yet contacted