Your financial data, protected the way a bank expects it to be.

• Your connection to this app is encrypted in transit (TLS), and your data at rest is encrypted using AES-256 via our managed PostgreSQL database (Amazon RDS), with keys managed through AWS KMS.
• Passwords are never stored in plaintext. We use bcrypt, an industry-standard one-way hashing algorithm.
• Two-factor authentication is required on every account, verified by email; 2FA secrets are encrypted independently with AES-256-GCM, separate from general database encryption.
• Every request to your data passes through tenant-isolation checks before anything is returned. Your account's data is never visible to another account.

• When you connect a bank account, you enter your credentials directly with Plaid, never with us. We never see or store your banking username or password.
• Access is read-only. We cannot move money, initiate payments, or make any change to your account.
• You can revoke access anytime from your account settings, which immediately stops all future data syncing.
• Plaid's infrastructure is independently SOC 2 Type II certified. It's the same infrastructure used by many major banking and fintech apps.

• Before any transaction is sent to our AI for categorization, it's anonymized: dates, amounts, account numbers, and reference codes are stripped first.
• The AI never sees your raw, identifiable bank transaction text, only a cleaned, generalized version.
• We do not use your financial data to train third-party AI models.

AgentXpense is hosted on Amazon Web Services, with a managed PostgreSQL database (Amazon RDS) that handles patching, backups, and encryption automatically, reducing the risk of manual configuration error. Files are stored privately and served only through signed, time-limited links. Our security approach is built on the audited infrastructure of Amazon Web Services and Plaid, both of which maintain independent SOC 2 Type II certifications. We rely on that audited foundation rather than attempting to duplicate the work ourselves, and pursuing AgentXpense’s own formal certifications is part of our roadmap as we grow. If your organization requires a specific certification as a condition of purchase, contact our sales team directly.