Account & security
How your data is protected
Workspace isolation in the database, private documents, an audit log and encrypted bank access.
Protection is built into the database and the server, not only into the interface. The Security page describes each of these in detail:
Good to know
- Every table holding financial data is protected by database rules scoped to workspace membership. One workspace's session cannot read another's data.
- Documents are stored privately per workspace, and download links expire within minutes.
- Changes to financial records are written to an append-only audit log.
- Bank sign-in happens in Plaid's window, and the access key Plaid issues is encrypted before it is stored.
- Two-step verification with an authenticator app can be turned on in Settings → Security, and you are signed out after 10 minutes without activity.
- Anything the assistant would change waits for confirmation.