VARDA
Log inConnect My Accounts
Trust & Security

Your business data, protected by design.

Varda helps you monitor your business without giving us the keys to your money. Connected account access is read-only — a technical limit, not just a promise.

Read-only access
A technical limit, not just a promise.
Varda cannot move money.

Varda can review the financial data you connect or upload. It cannot initiate transfers, send payments, edit bank accounts, or contact your bank on your behalf.

No bank username or password is ever stored by Varda.
Plaid handles secure bank authentication.
You can disconnect accounts from within the app at any time.

Encrypted data

Data is protected in transit with TLS and encrypted at rest by our infrastructure providers.

Account isolation

Row-level access controls help ensure each user can access only their own Varda data.

No ad tracking

Varda does not sell personal information or use transaction data for targeted advertising.

What Varda can see

Only the data needed to monitor your business.

Transaction dates, descriptions, vendors, categories, and amounts.
Account names, account types, and balances when you connect supported accounts.
CSV, Excel, and QuickBooks files you choose to upload.
Support messages and feedback you choose to send us.
What Varda does not collect

We don’t want data we don’t need.

Bank login credentials.
Social Security numbers.
Full bank account numbers.
Precise GPS location or demographic / protected-class data.
AI transparency

Ask Varda only runs when you ask.

Varda calculates the underlying facts first. When you submit a question, only the relevant structured business context is sent to OpenAI so it can explain those records in plain English.

Core totals, categories, subscriptions, and alerts are calculated before AI is involved.
We never send bank login credentials, Plaid access tokens, or complete account numbers to the AI provider.
AI cannot move money, change a record, or resolve an alert by itself.
OpenAI API data is not used to train OpenAI models by default.
Conversations are saved in your Varda account and can be deleted from Ask Varda.
Privacy-minded tooling

Built with trusted infrastructure.

Supabase for authentication and database infrastructure.
Plaid for secure financial account connections.
Vercel for application hosting.
PostHog and Sentry for product analytics and error monitoring with sensitive-data controls.
Resend for service-related emails.
Security roadmap

Earning trust over time.

We’re early, so we won’t claim certifications we don’t have. As Varda grows, these are the next trust investments we expect to make.

Multi-factor authentication options.
Formal vendor and access reviews.
Independent security testing.
SOC 2 readiness when the business is at that stage.
Questions about Varda security?
We’re happy to answer plainly — no jargon, no runaround.
Contact us