Bank-level security

Your security is our top priority

We employ enterprise-grade security at every layer to protect your financial data. Your trust is our most important asset.

Protection

How we protect your data

256-bit AES encryption

All data at rest is encrypted with AES-256 — the standard used by banks and governments.

TLS 1.3

All data in transit is protected with TLS 1.3, the latest secure transport protocol.

Secure credential handling

Bank connections run through Plaid. We never see, store, or access your login credentials.

SOC 2 Type II

Our systems are independently audited annually against rigorous security standards.

Access controls

Strict role-based access ensures only authorized personnel can reach sensitive systems.

Multi-factor auth

Protect your account with MFA — authenticator apps and security keys supported.

Certifications & compliance

SOC 2 Type II

Annual third-party audit

PCI DSS

Payment card compliance

GDPR

EU data protection

CCPA

California privacy

Practices

Beyond technology

Regular security audits

Independent penetration testing and security assessments on a recurring basis.

Employee security training

All staff complete security-awareness training and background checks.

Incident response

A comprehensive incident-response plan and a dedicated security team.

Vulnerability disclosure

A responsible-disclosure program for security researchers.

Bank connections

Secured by Plaid

We connect through Plaid — the trusted leader in financial data, used by Venmo, Robinhood, and Coinbase.

  • We never see your bank password
  • Read-only access to transactions
  • Revoke access anytime
  • 12,000+ supported institutions
Plaid

Questions about security?

Our security team is happy to walk you through exactly how we protect your data.