Security

This is the most important sentence on the page. Bord connects to your accounts through Plaid with read-only access: we can see balances, transactions, and holdings for the accounts you choose to share, and that is all. There is no transfer capability, no payment capability, no trading capability. Not “disabled”, not “off by default”: the access we request cannot move money, and no one who compromised a Bord account could move money with it either.

You never type your bank password into Bord. The connection happens inside Plaid's own flow, the same infrastructure used by Venmo, Chime, and most of the apps already on your phone, and your credentials go to your bank, not to us.

The Plaid access tokens that link your accounts are encrypted at rest with AES-256-GCM, and the encryption key lives outside the database. Stealing the database alone would yield tokens that are useless ciphertext.

Every table in our database enforces row-level security, meaning the database itself refuses to serve one user's rows to another user's session, in addition to the application checks in front of it.

Traffic is TLS-encrypted in transit. Sessions are handled by Clerk; cards are handled by Stripe and never touch our servers; nightly backups are encrypted and retained for recovery.

The voices react to your numbers, so your financial summary is included in the prompts that generate their takes. Those calls go to the model providers under API terms that do not train on the data. Your data is never sold, never brokered, and never used to target ads. The full detail is in the privacy policy.

Disconnecting an institution revokes Bord's access at Plaid and deletes that institution's data from our database. Deleting your account from Settings removes your financial data, your conversations, and your profile in one cascade. No export is kept, no shadow copy survives, and you don't need to email anyone to make it happen, though you can, at the address below, and a human will do it.

If something here is unclear, or you found something that worries you, write to us. Security reports get read first.