Read-only guarantee
Wingmnn connects to your bank accounts through Plaid using read-only access. We can view account balances and transaction history. We cannot initiate transfers, make payments, or move money in any way. This limitation is enforced at the API level by Plaid — even if our systems were compromised, financial transactions are not possible.
Encryption and storage
Financial data is encrypted with AES-256 at rest and TLS 1.3 in transit. Bank credentials are never stored on our servers — they're entered directly into Plaid's secure widget and stored by Plaid. We only receive and store a read-only access token and your transaction data.
Compliance
Wingmnn maintains SOC 2 Type II certification. Plaid itself is a regulated financial data provider with its own SOC 2, ISO 27001, and PCI DSS certifications. Your financial data passes through two independently certified security layers.
What we store
We store account names, balances, and transaction details (date, merchant, amount, category). We do not store account numbers, routing numbers, or login credentials. The data we store is sufficient for categorization, trend analysis, and financial insights — nothing more.