Encrypted in transit
Every connection to TwoVector, in the app and behind the scenes, runs over TLS.
Security
Money and health are sensitive. Here's plainly what TwoVector does to protect them — no badges, just the practices themselves.
Encrypted at rest
Your data is encrypted at rest in the database, not just while it travels.
Plaid holds your bank credentials
Bank logins are handled entirely by Plaid. TwoVector never sees or stores your bank password.
Signed, short-lived tokens
Access runs on signed JWT tokens with automatic refresh, not long-lived session cookies.
Backed up daily
The database is backed up every day, so a bad day on our end doesn’t mean losing your data.
Delete your data on request
Ask us to delete your account and everything in it, and we will — email support@twovector.com.
Who else touches your data
TwoVector relies on a small set of specialist providers to run the product. Each is scoped to one job.
AWSHosting, database, and file storage infrastructure.
PlaidBank account connections, balances, and transactions.
AnthropicPowers Vec, the AI assistant, inside TwoVector.
DeepgramReal-time transcription for the desktop notetaker, using your own API key.
StripeBilling, subscriptions, and payment processing.
What we don't claim
TwoVector doesn't hold a SOC 2 report or other formal compliance certification today. We'd rather tell you plainly what we do than put a badge on the page that implies more than we can back up. If that changes, this page will say so.
Questions about security or a request to delete your data? Emailsupport@twovector.com.
Ready to bring your accounts in?
Start your 30-day Pro trial today. No card required.