Your financial data is the most sensitive data you have. Here's how we protect it.
Your data lives in an encrypted database — encrypted at rest with AES-256 and in transit with TLS 1.2+. Backups are encrypted too, and access is scoped strictly to your household.
All bank connections go through Plaid using 256-bit AES encryption and TLS 1.2+. Worth never sees or stores your bank login credentials — Plaid handles authentication directly with your institution.
Your password is stored as a bcrypt hash with a cost factor of 10. Even if someone accessed the database, the password cannot be reversed.
The AI Assistant receives only aggregated monthly summaries — never raw transactions, merchant names, or account numbers. Your conversations are never used to train models or shared with third parties.
Plaid tokens and exchange API keys are encrypted at rest with AES-256-GCM. They are never exposed to the browser or included in client-side bundles.
We don't sell data, run ads, or share your information with data brokers. You pay for Worth; that's the whole business.