# How we protect your data

> No bank logins, invite-only spaces, encrypted connections and hashed passwords.

Canonical: https://www.traxpend.com/docs/how-we-protect-your-data
Last updated: 2026-10-16

- Traxpend **never asks for bank logins** — you add expenses yourself.
- Spaces are **invite-only**.
- Every connection uses **HTTPS**; passwords are stored only as salted hashes.
- Sign-in and password resets are **rate-limited**.
- We **don’t sell** your data.

## Why bankless architecture is safer

Most finance applications require linking your primary bank accounts using third-party screen scraping or credentials aggregators. If those services suffer a breach, your bank logins and account numbers are exposed. Traxpend uses a strictly zero-credential model: we never ask for, transmit, or store your banking login details, PINs, or account numbers.

## Infrastructure & cryptographic safeguards

- All data in transit is encrypted using TLS 1.3 with strict HTTP Strict Transport Security (HSTS) headers.
- Database volumes are encrypted at rest using AES-256 standards.
- Regular automated backups are encrypted and stored in geo-redundant secure vaults.

The full details are on our [security page](https://www.traxpend.com/security) and in the [privacy policy](https://www.traxpend.com/privacy).

## Related

- [Documentation](https://www.traxpend.com/docs)
- [Pricing](https://www.traxpend.com/pricing)
- [Features](https://www.traxpend.com/features)