Security & Trust

Your financial data is protected by industry-leading security standards. We partner with the most trusted names in fintech.

Plaid

SOC 2 Type II

Stripe

PCI DSS Level 1

DocuSign

ISO 27001

Argon2id

OWASP Standard

Data Encryption

  • Plaid access tokens encrypted at rest with AES-256
  • Passwords hashed with Argon2id (OWASP recommended)
  • All sensitive data encrypted in transit via TLS 1.3

Payment Security

  • Payments processed by Stripe (PCI DSS Level 1 certified)
  • We never see or store your full card number
  • Stripe handles all payment data compliance

Bank Connections

  • Powered by Plaid — SOC 2 Type II & SSAE 18 certified
  • Read-only access to transaction history
  • We never store your bank login credentials

E-Signatures

  • Powered by DocuSign — ISO 27001 certified
  • Legally binding electronic signatures
  • Tamper-evident audit trail for every document

Transport Security

  • HTTPS/TLS encryption on all connections
  • HTTP Strict Transport Security (HSTS) enabled
  • API rate limiting to prevent abuse

Privacy & Data Access

  • No credential storage — we never store bank passwords
  • Minimal data collection — only what's needed to file disputes
  • You can export or delete your data at any time

Questions about security?

We take security seriously. If you have any questions or concerns, please reach out.

Contact Us