This page describes how DaedArch Corporation safeguards financial-account data accessed through Plaid on behalf of our users.
All data is encrypted in transit using TLS (industry-standard) across our edge (Cloudflare) and internal services. Data at rest is stored on encrypted, access-controlled cloud infrastructure (Google Cloud). Personally identifiable information is tokenized at ingest and stored in a dedicated PII vault; raw values are revealed only at the moment of authorized use and never persisted in plaintext logs.
Access is default-deny. Every sensitive operation is authorized per-resource via cross-resource access control (xBAC) and role checks; possession of a session is never sufficient. Personal and business data are firewall-isolated so a user's private data never crosses into company or third-party scopes.
Every interaction — across every channel — passes through a unified identity/risk gate that screens for fraud, exfiltration, and out-of-norm activity, and steps up authentication or denies high-risk actions (e.g. money movement). The system fails closed: under any uncertainty it denies and surfaces a loud error rather than proceeding.
We collect only what is necessary to provide the requested service, classify and route it deterministically, and honor deletion / data-subject requests, including for data obtained via Plaid, in accordance with Plaid's End User Privacy Policy.
All access, routing, and identity decisions are recorded to immutable audit logs, enabling end-to-end traceability of every data flow.
Before connecting an account through Plaid, users are presented with a just-in-time notice and provide explicit consent; our processing is consistent with Plaid's End User Privacy Policy (plaid.com/legal).
DaedArch Corporation · Draft v0.1 · For Plaid production-access review.