Security is our priority

We take security and your privacy very seriously. That’s why we’ve partnered with financial data aggregators Finicity (a Mastercard company) and Plaid to provide access to your accounts. As leaders in the aggregation space, they specialize in retrieving and handling sensitive financial information on behalf of many financial institutions and fintechs.

How does it work?

When you connect an account to AssetClass, you’re allowing Finicity and Plaid access to your accounts on our behalf. AssetClass never sees your usernames or passwords. After you connect an account, AssetClass gets read-only access to your financial data, including holdings, balances, and transactions.

Some institutions allow us access to your account through a technology called OAuth. So when you, for example, connect Coinbase on AssetClass, you’ll log in on their website with your username and password. AssetClass never sees your credentials. You’ll get to approve the connection and the level of access we get. We then get read-only access to your accounts in the same way we would through Finicity and Plaid. You can revoke our access at any time through the institution.

Ecrypted in transit and at rest

All of our systems, along with those of both Finicity and Plaid employ industry-standard encryption technology – the same used by financial institutions.

Whenever data is transmitted, SSL encryption is required. Wherever we store user data, it is encrypted at rest. Additionally, especially sensitive user information, like emails and names, are encrypted again at the application level using AES 256 with a separate encryption key. Finally, your AssetClass password (again, we never have access to your bank credentials) is securely hashed using bcrypt with a cost factor of 12.