Our Security Promise

Pass-Through by Default

BankSync is designed to move authorised financial data from your provider to the destination you choose. By default, full banking datasets are processed transiently. We retain financial data only when a feature you enable requires storage, such as a future BankSync Tables feature or another managed destination, or where needed for support, security, compliance, backups, or legal requirements.

Enterprise-Grade Data Providers

BankSync partners with industry-leading open banking and financial data providers trusted by major banks and financial institutions worldwide, and complies with the highest security standards.

Strictly Read-Only Access

BankSync can only read your financial data, never modify it. We cannot:

• Move money or initiate transfers
• Change account settings or passwords
• Access investment trading features
• Apply for financial products

This read-only approach is a fundamental security feature that protects your accounts even in worst-case scenarios.

Global Open Banking Standards

We support regulated open banking standards across multiple regions, allowing you to connect to your bank without sharing login credentials. Open banking uses bank-approved APIs rather than passwords, the most secure connection method available.

Transient Data Architecture

For pass-through syncs, financial data is processed in short-lived worker environments and forwarded to the destination you configure. For managed features, including future BankSync Tables, stored financial data remains inside the BankSync Boundary until you export, share, sync, or otherwise send it elsewhere.

BankSync also retains operational metadata such as feed configuration, sync timestamps, and error logs so the service can run, recover, audit, and support your account.

Encryption in Transit and at Rest

All communication between your bank, BankSync, and your destination tools (like Notion) is encrypted using industry-standard TLS (Transport Layer Security) protocols. Data stored inside the BankSync Boundary is encrypted at rest.

Strong Authentication

BankSync leverages secure authentication methods and supports multi-factor authentication (MFA) to ensure only authorized users can access your BankSync account and configure connections.

We recommend enabling two-factor authentication on your BankSync account for an additional layer of security.

Our Business Is You, Not Your Data

BankSync's business model is straightforward: we charge a subscription fee for our service, not for your data. Within the BankSync Boundary, we don't sell your banking data, use it for advertising or data brokerage, disclose identifiable banking data for another party's independent commercial exploitation, or use customer banking data to train AI or machine-learning models.