Information Security Policy

Last updated: April 2026

SaveMate is committed to protecting user data and maintaining secure systems. This policy outlines how we safeguard financial information accessed through Plaid and other services.

Security Practices

  • Data Encryption: All data is encrypted in transit using HTTPS/TLS protocols
  • Access Controls: Access to systems and data is restricted using authentication and role-based permissions (least privilege)
  • Multi-Factor Authentication (MFA): MFA is enabled for internal systems where available
  • Data Minimization: SaveMate only accesses and stores data necessary to provide its services and does not store sensitive banking credentials
  • Vulnerability Management: We monitor for security vulnerabilities and apply updates or patches in a timely manner
  • Access Management: Access is reviewed periodically and removed promptly when no longer required
  • Infrastructure Security: Systems are hosted on secure, industry-standard cloud infrastructure (e.g., AWS) with built-in security controls

Contact

For any security-related questions or concerns, please contact: support@savemates.app