C
CashflowCycles

Security

How we protect your data

CashflowCycles works with your bank transactions and cash forecasts, so here is a plain description of where that data is kept, who can reach it and how it is protected.

What we do today

Each point below describes how the product works now. If something is not listed here, we don't claim it.

Where your data lives

The CashflowCycles application and its database are hosted on Amazon Web Services in Canada, in the Montréal region (ca-central-1). Your account data, synced transactions and forecasts are stored there.

Bank connections

Bank accounts connect through Plaid. You sign in to your bank inside Plaid's own window, so CashflowCycles never sees or stores your bank username or password. Our access is read-only: we can read balances and transactions, but we cannot move money or make changes to your accounts. You can disconnect a bank account at any time.

Encryption

Data travelling between your browser and CashflowCycles is encrypted with HTTPS (TLS). Data stored in our database is encrypted at rest using AWS storage encryption.

Account protection

You can turn on two-step verification. After your password, you enter a code from an authenticator app, which you set up by scanning a QR code. On team plans, admins invite each member, assign them a role, and can suspend, reactivate or remove a member at any time, so former staff lose access right away.

Separation between customers

Each customer's data is kept separate from every other customer's data. This separation is checked by automated tests that run as part of our development process.

Privacy and consent

We follow Quebec's Law 25 for personal information. Advertising cookies are only set after you give your consent, and you can decline them. Our privacy policy explains how we handle personal information and how to contact us about it.

Read the privacy policy

Reporting a security concern

If you think you have found a security issue, or you notice something unusual in your account, email us with as much detail as you can. Please don't include passwords or full bank account numbers in your message.

Email info@cashflowcycles.com

Questions about our security practices?

If your firm needs more detail before signing up, for example to complete an internal review, email us at info@cashflowcycles.com and we'll reply by email.

Try CashflowCycles with your own numbers

Connect a bank account read-only through Plaid and see your cash forecast. First-time subscribers get a 30-day free trial.