Reset your password

Enter your email and we’ll send a link. The link works for 60 minutes.

Bank connections by Plaid
AES-256 at rest
TLS 1.3
Read-only, always

Security

We never see your bank password

You sign in at your bank, through Plaid. Your credentials go to your bank and nowhere else. We never receive them and never store them.

Read-only. Always.

Octant holds a token that can read balances and transactions. There is no payment permission on it. Moving money is not a feature we have turned off — it is a permission we never held.

Encrypted end to end

AES-256-GCM at rest, TLS 1.3 in transit. The token for each connection is encrypted before it is stored, and it never appears in a log line or on a page.

And one thing most finance apps don’t do: Octant hides sensitive merchants from its own AI. Medical, legal, religious and political transactions are reduced to a category before anything is analysed. The model never sees the name. Set aside Why this is set aside Some categories — medical, legal, religious and political giving — are set aside before anything reaches the model. Octant sees that a payment happened and which broad category it belongs to. It does not see who it was to, and it will never write one of these into a plan.

What we don’t claim yet: Octant is not SOC 2 certified today. Our infrastructure runs on audited providers; we are not audited ourselves. We’ll say so here the day that changes.