Security at Midas
Your financial data deserves the highest level of protection. Here's how we keep it safe.
TLS 1.3 in transit, AES-256 at rest
OAuth 2.0, JWT tokens
AWS with KMS encryption
Audit logs, real-time alerts
Your Data's Journey
Protected at every step, from connection to insight.
What WeNEVERDo
Clear commitments. No exceptions. No asterisks.
Your data is not our product. Subscriptions fund us.
Your financials stay yours—never used to train models.
OAuth tokens only. We never see your login details.
No third parties without your explicit consent.
Security You Can Trust
Built on industry-leading infrastructure with proven security track records.
Where your data lives
- The same infrastructure trusted by Netflix and NASA
- Your data never leaves secure, encrypted servers
- Automatic backups across multiple locations
How we deliver to you
- Every connection is encrypted automatically
- Built-in protection against attacks
- Lightning-fast, secure global delivery
How payments work
- We never see or store your card details
- Same security as Apple and Amazon
- Fraud detection watches every transaction
Powers our AI insights
- Your data is processed, never stored
- Prohibited from training on your info
- Insights generated, then data discarded
Your accounting source
- Read-only access—we can't modify your books
- Secure OAuth means no password sharing
- Disconnect anytime with one click
Secure data pipelines
- SOC 2 Type II certified infrastructure
- End-to-end encryption for all data transfers
- Zero data retention after sync completes
Your Data, Your Control
Full rights under GDPR and CCPA. Request anytime via help@midascfo.com
Common Questions
We use multiple layers of protection: TLS 1.3 encryption for all data in transit, AES-256 encryption at rest via AWS KMS, OAuth 2.0 for secure authentication, and comprehensive audit logging.
Access to customer data is strictly limited and logged. Only authorized personnel can access data for support purposes, and all access is audited.
When you close your account, we delete your personal data and financial information. You can request a data export before closing your account.
Minimal financial context is sent to our AI partner (Groq) to generate responses. Groq is SOC 2 Type II certified and prohibited from using your data to train models.