Security
Money and health are sensitive. Here's plainly what TwoVector does to protect them. No badges, just the practices themselves.
-
Encrypted in transit
Every connection to TwoVector, in the app and behind the scenes, runs over TLS.
-
Encrypted at rest
Your data is encrypted at rest in the database, not just while it travels.
-
Plaid holds your bank credentials
Bank logins are handled entirely by Plaid. TwoVector never sees or stores your bank password.
-
Signed, short-lived tokens
Access runs on signed JWT tokens with automatic refresh, not long-lived session cookies.
-
Backed up daily
The database is backed up every day, so a bad day on our end doesn’t mean losing your data.
-
Delete your data on request
Ask us to delete your account and everything in it, and we will. Email support@twovector.com.
Who else touches your data
TwoVector relies on a small set of specialist providers to run the product. Each is scoped to one job.
- AWS Hosting, database, and file storage infrastructure.
- Plaid Bank account connections, balances, and transactions.
- Anthropic Powers Vec, the AI assistant, inside TwoVector.
- Deepgram Real-time transcription for the desktop notetaker.
- Stripe Billing, subscriptions, and payment processing.
What we don't claim
TwoVector doesn't hold a SOC 2 report or other formal compliance certification today. We'd rather tell you plainly what we do than put a badge on the page that implies more than we can back up. If that changes, this page will say so.
Questions about security or a request to delete your data? Email support@twovector.com.
Ready to bring your accounts in?
Start your 30-day Pro trial today. No card required.