Read-only guarantee
Wingmnn connects to your bank accounts through Plaid using read-only access. We can view account balances and transaction history. We cannot initiate transfers, make payments, or move money in any way. This limitation is enforced at the API level by Plaid — even if our systems were compromised, financial transactions are not possible.
Encryption and storage
Financial data is encrypted with AES-256 at rest and TLS 1.3 in transit. Bank credentials are never stored on our servers — they're entered directly into Plaid's secure widget and stored by Plaid. We only receive and store a read-only access token and your transaction data.
Security standards
Plaid is a regulated financial data provider with SOC 2, ISO 27001, and PCI DSS certifications. We use AES-256 encryption, TLS 1.3 in transit, and isolated infrastructure with full audit logging. We're working toward formal certification on our end — Plaid's certifications are already in place.
What we store
We store account names, balances, and transaction details (date, merchant, amount, category). We do not store account numbers, routing numbers, or login credentials. The data we store is sufficient for categorization, trend analysis, and financial insights — nothing more.