Protected access
Authenticated, user-scoped access controls protect financial records and sensitive backend operations.
Security & Trust
Clarity without compromise.
InTheBlk is designed to give users a clear view of their finances while keeping financial access, authentication, and sensitive data protected by layered technical and operational controls.
Encryption
Sensitive data is protected in transit with HTTPS/TLS, and provider access tokens are encrypted before storage.
Multi-factor authentication
Multi-factor authentication adds an additional layer of protection before sensitive account-linking activity.
Backend-only bank access
Bank credentials are not collected by InTheBlk, and Plaid access tokens are handled only by protected backend services.
Monitoring and abuse protection
Structured security monitoring, alerting, and distributed rate limiting protect sensitive and high-cost operations.
Data control
Users can disconnect linked institutions, delete imported financial data, and delete their InTheBlk account.
Policies
Our security commitments in writing.
Information Security Policy
Governance, authentication, encryption, monitoring, access control, incident response, and secure financial-data handling.
Read policy →Data Retention & Deletion PolicyHow linked-account access, imported financial information, privacy requests, and account deletion are handled.
Read policy →