Security

Your money is safe with us

Thryvest is built on bank-level security infrastructure. Here's exactly how we protect your data and your accounts.

256-bit encryption

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher — the same standard used by major banks.

We never see your passwords

Bank connections are powered by Plaid. Your login credentials go directly to your bank — Thryvest never receives or stores them.

Encrypted at rest

All your financial data stored in our database is encrypted at rest using AES-256 encryption — protected on disk even if the underlying storage media were ever compromised.

Read-only access

Thryvest's connection to your accounts is read-only: we analyze your balances and transactions but can never move, send, or withdraw money. The Plaid connection doesn't grant Thryvest the ability to initiate transfers.

Secure authentication

Your Thryvest account is protected by secure password hashing and authentication powered by Supabase, a SOC 2 certified provider.

We never sell your data

Your financial data is yours. We never sell, rent, or share your personal information with advertisers or data brokers.

Powered by trusted infrastructure

Plaid
Bank connectivity for 12,000+ financial institutions. Used by Venmo, Robinhood, and thousands of other apps.
SOC 2 Type II
Supabase
Database and authentication infrastructure with row-level security and AES-256 encryption at rest.
SOC 2 Type II
Stripe
Payment processing used by millions of businesses worldwide. If Thryvest introduces paid plans, card details are handled by Stripe and never stored on Thryvest servers.
PCI DSS Level 1
Netlify
Hosting and serverless infrastructure with enterprise-grade security and automatic HTTPS enforcement.
SOC 2 Type II

Found a security issue?

We take security seriously. If you've discovered a vulnerability, please let us know immediately and we'll address it right away.

Report a vulnerability