Secure, by design.

256-bit encryption protects your data both in transit and at rest — the same standard used by major financial institutions.

2FA is available and supported via email-based verification through our authentication provider.

Correlate connects to your financial accounts via Plaid and SnapTrade. These connections are strictly read-only — Correlate can never move money or make transactions on your behalf.

We never store your bank username or password. Authentication with financial institutions is handled entirely by our data partners using tokenized access.

We build on SOC 2 certified cloud infrastructure with logical data separation, role-based access control, and encryption at rest and in transit.

We show our work. Calculation methodologies are documented inside the app. When we add a new tool or change how we handle your data, we tell you what it is, what it receives, and why — not buried in a policy update, but as a clear in-app notification.

Discovered a vulnerability? Report it to howdy@withcorrelate.com. We take all reports seriously and respond promptly.