Security at Vecty

1. Our Approach

Vecty handles financial data for a living, so protecting it is a core part of the product, not an afterthought. This page describes the practices we apply to keep your data confidential, intact, and available.

2. Encryption

• In transit: All traffic between your browser, our platform, and our infrastructure is encrypted with TLS.
• At rest: Financial data, documents, and backups are encrypted at rest.

3. Bank Connections

Bank and credit card feeds are connected through Plaid, a regulated data network used across the financial industry. You authenticate directly with your bank through Plaid; Vecty never sees or stores your banking username or password. Access is read-only: we can read transactions and balances, and we cannot move money.

4. Access Control

• Access to production data follows the principle of least privilege: only the personnel who need it to serve your account have it.
• Role-based access controls separate what our bookkeeping, engineering, and support staff can see and do.
• Multi-factor authentication is required for administrative access to our systems.
• Access is reviewed and revoked promptly when roles change.

5. Data Retention and Deletion

We keep data only as long as it is needed to serve you and to meet legal record-keeping requirements. Financial ledgers are retained for 7 years and payroll records for 6 years, in line with IRS and audit requirements; other account data is deleted after your service ends, subject to a short grace period. Full details are in our Privacy Policy.

6. Vendors

We use a small set of service providers for hosting, payments, and bank connectivity. Each is bound by confidentiality obligations, and we share only the data required for the service they perform. We do not sell your data.

7. Reporting a Vulnerability

If you believe you have found a security issue in Vecty, we want to hear about it. Email support@vecty.ai with the details and we will respond promptly. Please do not access other customers' data or disrupt the service while investigating.

8. Questions

For any question about our security practices, contact us:

Email: support@vecty.ai