# Security & Privacy Scorecard

## Deutsche Bank

## What This Means for You

Activity is shared with Adobe Marketing Cloud and analytics services. Push notifications are delivered via Firebase, and Google Maps and Pay are integrated. Users retain control over consent through Usercentrics, and data travels over strongly secured network connections.

## Recommendation: Trustworthy

**Best For:** Deutsche Bank customers comfortable with standard analytics

## Key Findings

**Data Security** - 5 findings (4 medium, 1 info)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 3 findings (1 high, 2 medium)

## Privacy Concerns

### What Data is Collected

Account activity, transaction history, and device identifiers are collected to operate the app. When in-app map features are used, user location is accessed via Google Maps. Adobe Marketing Cloud collects usage patterns and interactions to build a behavioral profile used for marketing communications.

### Third-Party Data Sharing

Data is shared with the following third-party services:

- **Adobe Marketing Cloud** - receives usage and behavioral data for advertising and analytics
- **Google Maps** - accesses user location when map-based features are used
- **Google Pay** - handles payment data for in-app payment flows
- **Firebase Cloud Messaging** - delivers push notifications to the device on behalf of Deutsche Bank
- **WebID Solutions** - processes user identity data during verification steps
- **Usercentrics** - manages user consent choices across third-party data processing activities
- **Gini Bank SDK** - processes images of user documents during document-scanning workflows
- **ML Kit** - performs on-device text and document recognition when documents are scanned

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 85/100 |
| Privacy | 75/100 |
| Data Security | 82/100 |
| Network Security | 100/100 |
| Code Safety | 88/100 |
| Data Collection | 78/100 |
| Data Sharing | 70/100 |
| User Control | 85/100 |

## Positive Security Features

- All network communications achieve a perfect security score, meaning banking data is strongly protected during transmission
- Usercentrics consent management gives users direct control over which third parties may process their data
- TrustKit enforces strict policies governing how the app communicates over the network, protecting data from interception
- SealOne BestSign provides a robust digital authorization layer for transaction signing

## Areas for Improvement

- Behavioral and usage data is shared with Adobe Marketing Cloud for advertising. Visiting the in-app privacy or consent settings and withdrawing marketing consent can reduce this sharing.
- Data sharing extends across multiple analytics and identity providers simultaneously. A clearer in-app summary showing exactly which data flows to which company would make it easier for users to stay informed.
- Some data handling practices for information stored on device have room to be tightened, based on the medium-severity findings identified in the data security category.

---

## About This Analysis

This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of analysis and may not capture every privacy or security characteristic of the live service.

### App Details

- **App:** Deutsche Bank
- **Package:** com.db.pwcc.dbmobile
- **Version:** 3.30.1.40237
- **Platform:** Android
- **Scan Date:** February 12, 2026