Bank Account Masking

OutflowGuard masks bank account details to protect sensitive financial information.

What Is Masked

When displaying bank account information:

• Only the last 4 digits of account numbers are shown

• BSB numbers are shown in full (required for identification)

Display Formats

Australian Accounts

BSB 123-456 •••• 1234

International Accounts

•••• 1234

Where Masking Applies

• Dashboard - Incident list and details

• Notifications - Slack, Teams, and email alerts

• Audit logs - Historical records

• Exports - Downloaded data

Full Details

Full bank details are never stored in OutflowGuard. We only:

1. Retrieve details from Xero during polling

2. Create a hash for comparison

3. Store the masked version for display

4. Discard the full details

Why This Matters

• Reduces risk if data is compromised

• Complies with data minimisation principles

• Still provides enough info for identification