Your financial data,
protected at every layer
Moat Finance is built for sensitive financial information. Whether you sync in the cloud or keep everything on your computer, security is designed in — not bolted on.
Connecting bank accounts
When you link a financial institution, Moat follows the same security practices shown in the app — every time you connect.
AES-256 encryption
Sensitive tokens and secrets are encrypted at rest with AES-256-GCM. All data is encrypted in transit with TLS.
Read-only access
Moat only ever requests read-only access. We cannot move or transfer money on your behalf.
Credentials never stored
Your bank login is handled entirely by your chosen financial data provider — Plaid, MX, or Finicity. Moat never sees or stores your credentials.
Revoke access anytime
Disconnect any institution at any time from your accounts page. Access is revoked immediately.
Two modes, one security standard
Choose cloud sync for convenience across devices, or the desktop app for maximum privacy. Both are built with the same security principles.
Moat Finance Cloud
- Encryption at rest and in transit Provider access tokens and 2FA secrets are encrypted with AES-256-GCM. All API traffic uses TLS.
- Secure authentication Sign in with Google, Apple, or email. Passwords are stored as one-way hashes. Optional two-factor authentication adds a second layer.
- Read-only financial connections Account linking through Plaid, MX, and Finicity is read-only — Moat cannot initiate transactions.
- No credentials on our servers Bank login flows stay with your data provider. Moat stores only encrypted access tokens, never usernames or passwords.
- Privacy-first analytics and logging Product analytics and operational logs exclude email, merchant names, transaction descriptions, and account numbers by policy.
- You control your data Export your data or permanently delete your account at any time from Settings. Disconnecting an institution revokes access immediately.
Moat Finance Local
- Data stays on your computer Your financial profile lives in a local SQLite database. No cloud database. No remote account storage unless you opt in.
- Biometric unlock every session On macOS, Touch ID gates access every time you open the app. Your vault is locked on launch — you authenticate before any data is accessible.
- App password protection Set a local vault password on any platform. Every session requires unlock with your password or biometrics before Moat opens your financial data.
- OS keychain for provider tokens Plaid access tokens on desktop are encrypted with your operating system's secure storage — Keychain on macOS, Credential Manager on Windows, libsecret on Linux.
- Isolated app architecture Context isolation and strict IPC boundaries keep the UI separate from your data layer. All cross-process communication is validated with typed schemas.
- Fully offline capable No cloud dependency for core features. Optional local AI agent access runs on localhost with scoped tokens and an audit log you control.
Security principles we follow
Least privilege
Read-only bank connections. Scoped agent tokens. Server-side authorization on every write — UI visibility is never treated as access control.
Defense in depth
Encryption, authentication, access controls, and logging policies work together. Sensitive fields are encrypted even inside an already-secured database.
Transparency
Our Privacy Policy describes what we collect and why. You can export, disconnect, and delete your data at any time.
Questions about security?
If you believe your account has been compromised or have a security concern, contact us at support@moatfinance.ai.