Security

$pipeline organizes your financial data and provides an interface to connected services. Moov processes money movement for authorized payments through enabled Moov features. Below is how we protect the information you connect and provide to us.

Hosting & infrastructure

• Vercel (US): serverless application hosting (SOC 2 Type II).
• Supabase (US region): managed PostgreSQL + authentication (SOC 2 Type II).
• No self-managed servers.

Encryption in transit

TLS 1.2+ everywhere. Vercel and Supabase both enforce HTTPS; non-HTTPS requests are rejected at the edge.

Encryption at rest

Supabase encrypts all database storage at rest at the volume level (AWS-managed keys).

Plaid access tokens are additionally encrypted at the application layer with AES-256-GCM. The encryption key lives in our hosting environment (not in the database), so a database read alone cannot decrypt them. Tokens never appear in logs or backups in plaintext form.

Access control

• Postgres row-level securityisolates each household's data. A signed-in user can only ever query rows that belong to them.
• The app server uses a least-privilege key for user reads.
• A separate service-role key (never shipped to the browser) handles privileged writes from server-side routes only.
• Plaid tokens are never exposed to the browser.

Authentication

• Supabase Auth (email + password). Passwords are hashed with industry-standard algorithms. We do not store them in plaintext.
• TOTP-based two-factor authentication available, with single-use recovery codes.
• Sessions are short-lived and re-validated on every protected request.

Secrets management

All API keys (Plaid, Anthropic, Stripe, our application encryption key) are stored as platform environment variables (Vercel and Supabase). Nothing sensitive lives in source control. Pre-commit secret scanning is enabled on the repo.

AI-assisted processing

Anthropic powers classification, document reading and assistant features. Classification uses transaction details; document reading processes the files you submit; assistant requests can include relevant balances, transactions, bookkeeping and tax information. Files you upload may contain personal or financial identifiers. Our Privacy Policy explains this processing and links to Anthropic's commercial data-use policy.

Changes proposed by assistant chat are staged for your confirmation before being applied. The assistant does not have a tool to execute bank transfers. AI output should be checked against your records.

Money movement

Processed by Moov. $pipeline provides the interface and submits payment instructions you authorize to Moov. Moov processes and reports the money movement; $pipeline displays its status and records the activity. Payment features require the applicable onboarding, account permissions and authorization. Connecting a Plaid data feed alone does not authorize a payment.

Disconnect & deletion

You can disconnect any institution at any time from the in-app settings, which calls Plaid /item/remove, marks the connection revoked, and stops syncing that institution. Your existing transaction history stays in your account.

You can delete your account and all data from the in-app settings, which calls Plaid /item/remove for every connected item and purges every row associated with your account within 30 days. We instruct Plaid to do the same.

Incident response

We maintain a written incident-response and breach-notification plan with defined severity tiers, containment playbooks, and notification windows. Targets: ≤24 hours notification to Plaid when our handling of Plaid data is implicated; ≤72 hours to affected users for material risk to their data; the strictest applicable timeline for state regulators and CCPA / GDPR supervisory authorities. Report a suspected incident to support@moneypipeline.io.

Subprocessors

Plaid, Supabase, Vercel, Anthropic, Moov, Stripe and PostHog, listed in our Privacy Policy. Their processing is subject to the applicable agreements and privacy policies.

Reporting a vulnerability

If you believe you've found a security issue, email support@moneypipeline.io. Please give us a reasonable window to respond before public disclosure.