Data Encryption
Last updated May 2026 · Prototype document, informational only.
Encryption is a core part of how we protect your information, both as it travels and where it is stored.
Encryption in transit
All traffic between your browser and our servers is encrypted using HTTPS (TLS). This protects your data from being read or tampered with while it moves across the network.
Encryption at rest
Data stored in our managed database is encrypted at rest by the underlying infrastructure provider. This applies to your transactions, balances, budgets, goals, and profile data.
Sensitive tokens
Bank access tokens are encrypted before being stored and are only decrypted server-side when needed to refresh your financial data. They are never sent to the browser.
Key management
Encryption keys and other secrets are kept in server-side environment configuration and are not embedded in client code. Access is limited to the backend services that require it.