Security

You're handing us your bank, your books and your billing. Here's where they go.

Who can see your data

Your company gets its own workspace and its own warehouse. Nobody else's queries can reach it. Tests check that on every code change, and a change that fails them can't ship.

People get in by invitation only. Two-step sign-in is required once a bank or card is connected. Vantidge can see your workspace because we run it, and your team page says so.

Your data builds your reports and your model. It isn't sold, used for ads or shared with another client.

Your logins and keys

Keys are stored encrypted in Google Secret Manager and never sent back to a browser. You'll only ever see the last 4 characters.

Banks connect through Plaid and QuickBooks through Intuit's own sign-in. You never give us a bank password.

Disconnect a system and its key stops working right away.

Where it lives

Google Cloud and Firebase, in the United States, encrypted in transit and at rest. Client data doesn't go to laptops, email or chat. The one exception is an export you ask for, and that's deleted once it's delivered.

When you leave

You get an export of your model and data if you want it. Then we delete the workspace, the keys and the warehouse, revoke the Plaid and QuickBooks connections and send you written confirmation.

Who we use

Google Cloud and Firebase, Fivetran, Plaid, Intuit, GitHub and Slack (for our own alerts). We check each one for a SOC 2 report or equivalent before we add it.

Want the written policies, or found a problem? Email sophie@getvantidge.com. See also the privacy policy and terms.