Security at Bancsimple

What Claude can see

When you connect Claude to Bancsimple, it does not get raw access to a database. It sees structured financial data through 15 read-only tools, scoped to exactly the categories you approve at connection time:

• Account information - institution name, account name/nickname, type, balance, currency, and status. Mortgage accounts also include interest rate, maturity date, and prepayment terms.
• Transactions - description, amount, category, date, and type.
• Net worth - current position and up to 120 historical snapshots.
• Investments - holdings, buy/sell/dividend activity, book value vs. market value.
• Subscriptions, bills, budgets, savings goals - tracked and computed summaries.
• Real estate, private equity, and valued personal items - records you've added to Bancsimple.

Every tool call is a discrete, authorized action against your own data - not a bulk export.

What never leaves Bancsimple

• Bank account numbers. Bancsimple never receives or stores real bank account or routing numbers - full or masked. Wealthica holds the actual banking connection, which itself does not include actual account numbers; Bancsimple only stores Wealthica's own internal reference identifiers, and those are never included in any connector response.
• Bank login credentials. Your bank username, password, and any multi-factor codes stay between you and your bank via Wealthica's secure connection flow. Bancsimple never sees or stores them.
• Raw database records. Claude receives the specific fields listed above - never an unfiltered export of your account data.
• Other users' data. Every request is authenticated and scoped server-side to your account. There is no way for a request to retrieve another user's records.
• Write access of any kind. No tool can move money, modify an account, or create, edit, or delete any record.

How the Claude connector is secured

• Read-only access. No tool exposed to Claude can modify, create, or delete data, move money, or take any action on your account.
• OAuth 2.0 with explicit consent. Connecting Claude requires you to log into your own Bancsimple account and approve a consent screen listing exactly which data categories you're sharing. Nothing is shared automatically or without your action.
• Scoped access. Access is broken into granular scopes (net worth, transactions, investments, etc.). Only the categories you approve are made available.
• Server-side enforcement. Every request is authenticated and scoped to your account specifically - enforced server-side, not by anything the connector's caller supplies.
• Revocable at any time. You can disconnect Claude's access instantly from Bancsimple (Menu → Connected Apps) or from within Claude's own settings. Disconnecting immediately ends all access.

How Wealthica handles your account connections

Bancsimple uses Wealthica, a Canadian financial-data aggregation provider, to connect and aggregate data from your financial institutions.

• Read-only by design. Wealthica is strictly read-only - trading, fund withdrawals, money transfers, or other transactions are not possible through the platform.
• API-first connections where available. When available, Wealthica favors API authentication to connect to your financial accounts, so you don't have to share your account credentials directly.
• Encryption. Wealthica secures data with AES-256 encryption, and encrypts all in-transit data using TLS 1.2 or higher.
• Infrastructure and certifications. Wealthica runs on Amazon Web Services, whose data centres are certified ISO 27001, SOC 2 (Type II), PCI DSS (Level 1), and FISMA. Wealthica itself undergoes regular third-party audits and holds a SOC 2 Type II report covering security and availability controls.
• Ongoing monitoring. Wealthica continuously monitors and runs daily vulnerability scans across its website and apps.
• Privacy compliance. Wealthica complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What Bancsimple never does with your data

• Your data is never sold - not to advertisers, not to data brokers, not to anyone.
• Your data is never used for advertising.
• Your data is never shared without your explicit permission - no third party sees it unless you've specifically authorized a connection.

Privacy approach

Bancsimple's systems are designed around the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA):

• Accountability. Privacy inquiries and requests can be directed to hello@bancsimple.ca.
• Data isolation. Every record is scoped to the user who created it, enforced at the database level - no user's data is readable by another.
• Purpose-specific collection. Data is collected only for the features you use: account aggregation, net worth tracking, budgeting, and (optionally) AI connector access. Nothing is collected covertly.
• Explicit consent. Connecting Claude requires an OAuth consent screen with granular, named scopes. Linking a financial institution goes through Wealthica's own consent flow.
• Minimal collection. Bancsimple only holds data for accounts you've actively linked - nothing is gathered beyond what the product needs.
• Limited use and disclosure. The Claude connector is read-only, request-based (no background syncing), and revocable at any time. Your data is never sold.
• Technical safeguards. All connections use HTTPS/TLS. Data access is scoped and enforced server-side. Access tokens are cryptographically signed.
• Access to your own data. You can view all of your data at any time within the Bancsimple app.

Data retention

Bancsimple retains your data for as long as your account remains active. There is no automatic purging of historical records (such as transaction history or net worth snapshots) - this data persists to support features like trend tracking over time.

You can request deletion of your account and associated data at any time by contacting hello@bancsimple.ca. Deleting your account removes your data from Bancsimple's systems; it does not affect your accounts at your financial institutions or your connection with Wealthica, which you can separately manage or revoke.

If you disconnect the Claude connector specifically, Claude immediately loses access to your data, but your Bancsimple account and its data remain unless you separately request account deletion.

Reporting a security concern

If you discover a security vulnerability or have a concern about how your data is handled, contact us at hello@bancsimple.ca.