Security Portal
Overview
Plaid is focused on democratizing financial services through technology. We build beautiful consumer experiences, developer-friendly infrastructure, and intelligent tools that give everyone the ability to create amazing products that solve big problems. Plaid helps you safely connect your financial accounts to the apps and services you love. We were founded on the principle that consumers have a right to their financial information. Consumers decide where, how, and with whom it’s shared. That’s why every Plaid product is built with meaningful control and security in mind.
Compliance
ISO 27001
ISO 27001 SoA
ISO 27701
SOC 2
TruSight
Plaid is reviewed and audited by
Schellman
Armanino
Bishop Fox
TruSight
Documents
Data Flow Diagram
Pentest Report
ISO 27001
ISO 27001 SoA
ISO 27701
SOC 2
TruSight
CAIQ
SIG
Cyber Insurance
Acceptable Use Policy
Access & Authentication Controls Policy
Backup Policy
Business Continuity and Disaster Recovery Plan
Data Classification & Handling Policy
Encryption & Key Management Policy
Incident Response Policy
Information Security Policy
Network Security Policy
Password Policy
Risk Management Policy
Software Development Lifecycle
Vendor Management Policy
Vulnerability Management Policy
Financial Statements Audit
Plaid Basic Information
Plaid US Team Member Handbook
Proof of Business Document
W-9
Business Continuity
Recovery Time Objective< 24 Hours
Recovery Point Objective< 24 Hours
HostingMajor Cloud Provider
Product Security
Audit Logging
Data Security
Integrations
See more
Reports
Data Flow Diagram
Pentest Report
SOC 2 Report
See more
Self-Assessments
CAIQ
SIG
Data Security
Access Reviews
Backups Enabled
Data Erasure
See more
App Security
Bot Detection
Code Analysis
Credential Management
See more
Legal
Data Privacy
Chief Privacy Officer
Cookies
Data Breach Notifications
See more
Access Control
Data Access
Logging
Password Security
Infrastructure
Endpoint Security
Disk Encryption
DNS Filtering
Endpoint Detection & Response
See more
Network Security
DMARC
Firewall
IDS/IPS
See more
Corporate Security
Asset Management Practices
Email Protection
Employee Training
See more
Policies
Acceptable Use Policy
Access & Authentication Controls Policy
Anti-Malicious Software Policy
See more
Security Grades
Qualys SSL Labs
SSL labs report
A
Knowledge Base
- What external audits do you undergo, if any?
- What is Plaid?
- Where are the data processing activities performed for Plaid products?
- Can you provide us some basic business information regarding Plaid?
- PCI AoC covering scope for services provided.
See more
Trust Center Updates
If you need help using this portal, please contact our Cybersecurity Risk team.
If you think you may have discovered a vulnerability, please send us a note.