Security

General

Boldin employs SOC standard security measures throughout our application and operations.  Highlights of how we protect your data include:

• We use bank-level security and industry best practices to ensure that we preserve your data security and privacy
• All communication between your browser and our servers uses industry-standard 256-bit encryption. Our website’s encryption is graded “A” by Qualys SSL Labs.
• We have strict internal access controls so that no Boldin employees have access to your credentials
• Your data is stored in data centers that are protected 24/7 with biometric checkpoints, video surveillance and other industry-standard techniques.

Compliance

Boldin adheres to SOC2 Type 1 and 2 security controls and our most recent Type 2 certification period was completed September 30, 2025.  We are TrustArc certified, GDPR compliant and adhere to CCPA regulations.

Data Privacy and Security

Boldin does not:

• Sell your data, and if we share data with third parties to improve our products and services we make sure they don’t sell your data either
• Require your social security number, your real name, or any account numbers
• Store the credit card number you use for purchases

Boldin offers users the option to utilize Multi Factor Authentication (2FA) to further protect their accounts.

Account Linking

• To link your financial accounts, we partner with leading financial technology providers that prioritize security and undergo regular audits to ensure the safety of your data.
• When linking accounts, we never send your credentials to your browser or store them ourselves. Our partners employ industry-leading security practices to protect your accounts.

Think you’ve found a bug?

We’ve built Boldin from the ground up. All technology contains bugs, and the public plays a crucial role in identifying these. If you believe you’ve found a security bug or vulnerability, please email us at: [email protected].