The short version is the same three commitments we print on every page: SOC 2 infrastructure · Read-only access · Private by design. Here's what each one means in practice.
We never see your credentials and can't move money. Bank connections run through Plaid: you sign in on your bank's own screen, TreasuryFlow receives a read-only feed of balances and transactions, and you can disconnect anytime — from our side or your bank's.
Your data is encrypted at rest and in transit, on SOC 2 Type II–compliant infrastructure (Google Cloud). We're not independently certified yet — and we say so rather than imply otherwise. We're happy to share our subprocessor list and security questionnaire for vendor reviews: email security@treasuryflow.ai.
Your exact transaction amounts never enter our logs or analytics. Internally, categorization and ML run on privacy-preserving magnitude ranges rather than raw figures; exact amounts are delivered only through your authenticated account — the dashboard and your Excel exports. The complete data picture, including every third-party service we use and what each receives, is in the Privacy Policy.
Found a vulnerability or have a security question? Email security@treasuryflow.ai — it's read by the founder.