Security

Your money is safe with us

Thryvest is built on bank-level security infrastructure. Here's exactly how we protect your data and your accounts.

🔒

256-bit encryption

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher — the same standard used by major banks.

🏦

We never see your passwords

Bank connections are powered by Plaid. Your login credentials go directly to your bank — Thryvest never receives or stores them.

🛡️

Encrypted at rest

All your financial data stored in our database is encrypted at rest using AES-256 encryption. Your data is unreadable without your credentials.

👁️

Read-only access

Thryvest only reads your account data to analyze your finances. We cannot move money without your explicit approval for every transaction.

🔑

Secure authentication

Your Thryvest account is protected by secure password hashing and authentication powered by Supabase, a SOC 2 certified provider.

📋

We never sell your data

Your financial data is yours. We never sell, rent, or share your personal information with advertisers or data brokers.

Powered by trusted infrastructure

Plaid
Bank connectivity for 12,000+ financial institutions. Used by Venmo, Robinhood, and thousands of other apps.
SOC 2 Type II
Supabase
Database and authentication infrastructure with row-level security and AES-256 encryption at rest.
SOC 2 Type II
Stripe
Payment processing used by millions of businesses worldwide. Your payment info is never stored on Thryvest servers.
PCI DSS Level 1
Netlify
Hosting and serverless infrastructure with enterprise-grade security and automatic HTTPS enforcement.
SOC 2 Type II

Found a security issue?

We take security seriously. If you've discovered a vulnerability, please let us know immediately and we'll address it right away.