The short version is the same three commitments we print on every page: SOC 2 infrastructure · Read-only access · Private by design. Here's what each one means in practice.
We never see your credentials and can't move money. Bank connections run through Plaid: you sign in on your bank's own screen, TreasuryFlow receives a read-only feed of balances and transactions, and you can disconnect anytime, from our side or your bank's.
Your data is encrypted at rest and in transit, on SOC 2 Type II–compliant infrastructure (Google Cloud). We're not independently certified yet, and we say so rather than imply otherwise. We're happy to share our subprocessor list and security questionnaire for vendor reviews: email security@treasuryflow.ai.
Your exact transaction amounts never enter our logs or analytics. Internally, categorization and ML run on privacy-preserving magnitude ranges rather than raw figures; exact amounts are delivered only through your authenticated account: the dashboard and your Excel exports. The complete data picture, including every third-party service we use and what each receives, is in the Privacy Policy.
Found a vulnerability or have a security question? Email security@treasuryflow.ai; it's read by the founder.