Security & Trust Center

Your Bank Data, Protected the Way a Bank Would Protect It

BankSummary connects to your accounts through secure, bank-approved, read-only connections. Your passwords are never stored, and no one can access or move your money. Everything is synced safely so you can view your finances in one place, with full control and transparency at every step.

Independently recognized security & compliance frameworks

SOC for Service Organizations ISO 27001 (Schellman Certified) Cyber Essentials Plus C5 Salesforce BCR TRUSTe APEC Certified Privacy HITRUST CSF Certified

Access, in plain terms

What BankSummary can see and what it never touches

Linking an account gives BankSummary a narrow, read-only view. It does not give BankSummary any ability to move your money.

✓ What we access

Account balances, updated on a regular sync schedule
Transaction history, for categorization and reporting
Account and institution names, so your dashboard is easy to read
Basic account type (checking, savings, credit, etc.)

✕ What we never access or store

Your online banking username or password
The ability to move, transfer, or withdraw funds
The ability to change anything inside your actual bank account
Your data sold or shared with advertisers

Built on trusted infrastructure

We didn't build our own banking network we built on the ones that already work

Rather than inventing new ways to move financial data, BankSummary is built on two infrastructure partners already trusted at scale.

Plaid helps all companies build fintech solutions by making it easy, safe, and reliable for people to connect their financial data to apps and services. BankSummary uses Plaid's network to establish the secure, read-only connection to your bank the moment you link an account so the connection itself runs on infrastructure already used across the fintech industry, not a custom or unproven system.

BankSummary's dashboard is built natively on Salesforce, the CRM platform trusted by banks, insurers, and financial institutions worldwide to manage sensitive customer data. That means your balances, transactions, and reports sit inside Salesforce's enterprise-grade data infrastructure and access controls, not a standalone system built from scratch.

How it's protected

Three layers standing between your data and anyone else

Every connection, and everything synced through it, passes through the same three layers of protection.

Layer 1

Tokenized, read-only connections

Instead of storing your bank password, BankSummary receives a secure token at the moment you authorize a connection. That token grants read-only access it can't authorize a payment or transfer.

Layer 2

AES-256 encryption

Data is encrypted both in transit and at rest using AES-256, the same standard used across the financial industry, so your synced balances and transactions stay unreadable to anyone without authorized access.

Layer 3

Multi-factor authentication

Signing in to your own BankSummary dashboard requires more than a password, adding a second check before anyone, including you on an unfamiliar device, can view your data.

Compliance

Built against recognized security frameworks

BankSummary's security program is built to align with the following independently recognized standards.

SOC

For Service Organizations controls over security and availability

ISO 27001

Schellman-certified information security management

Cyber Essentials Plus

Independently verified baseline cyber security controls

Cloud security attestation framework

Salesforce BCR

Binding Corporate Rules for cross-border data handling

TRUSTe APEC

Certified privacy and cross-border data processing

HITRUST CSF

Common security framework certification

Bank-Approved APIs

Connections established via recognized banking data networks

Your control

You decide what's connected, always

Linking an account isn't a one-way door. You stay in control of every connection, every time.

Disconnect any account in a few clicks

Remove a bank connection anytime from your dashboard, without needing to contact support.

Request full data deletion

Ask us to permanently delete previously synced transaction history at any time.

Guided reconnection when a bank requires it

If your bank periodically requires reauthentication, you'll get a clear prompt never a silent lapse in your data.

No data sold, ever

BankSummary doesn't monetize your financial data through advertising or third-party sale, and never will.

Frequently asked questions

Security questions, answered directly

Q1: Is it safe to link my bank account to BankSummary?

Yes. BankSummary connects to your accounts through secure, bank-approved, read-only API connections. We never see or store your online banking username or password, and we cannot move, withdraw, or transfer your money.

Q2: Does BankSummary store my bank login credentials?

No. Your login credentials are handled by a tokenized connection at the point of authorization and are never stored on BankSummary's servers. BankSummary only receives an encrypted token that allows read-only access to your balances and transactions.

Q3: What is a read-only bank connection?

A read-only connection means BankSummary can view your account balances and transaction history, but has no ability to initiate a payment, transfer funds, or change anything inside your actual bank account. This connection is established through Plaid's secure network at the moment you authorize access.

Q4: Does BankSummary sell or share my financial data?

No. BankSummary does not sell user data to advertisers or third parties. Your financial information is used only to power your own dashboard, reports, and alerts.

Q5: How is my data encrypted?

Data in transit and at rest is protected with AES-256 encryption, and account access is secured with multi-factor authentication and tokenized connections rather than stored passwords.

Q6: What happens if I disconnect a bank account?

You can disconnect any account at any time from your dashboard. Once disconnected, BankSummary stops syncing new data from that account, and you can request full deletion of previously synced history.

Q7: Is BankSummary independently certified or audited?

BankSummary's security program is built to align with recognized industry frameworks, including SOC for Service Organizations, ISO 27001, Cyber Essentials Plus, and HITRUST CSF. Certification scope and current status are available on request.

See your accounts in one place, without giving up control

Connect your first account in minutes. Disconnect it just as easily, any time you want.

Book a Free Demo Check Supported Banks