Security Overview

Last Updated: February 26, 2026

1. Data Encryption

All data is transmitted via HTTPS and encrypted in transit using TLS 1.3. Sensitive data at rest is encrypted using AES-256.

2. Secure Storage

Access tokens and transaction data are stored securely with strict access controls. We follow the principle of least privilege for all data access.

3. Authentication

Session-based authentication with one-time codes is used to protect user accounts. No passwords are stored -- authentication happens via secure email verification.

4. Infrastructure

Servers are protected using industry-standard security practices including firewalls, intrusion detection, and regular security audits.

5. Third-Party Providers

We rely on Plaid for secure financial data access and trusted infrastructure providers (Vercel, AWS) for secure data processing and storage.