How your bank connection is protected
Your bank login is never stored or shared with us. Bank connections are read-only and encrypted with 256-bit encryption, through a licensed, EU-regulated open banking provider. Invoflux is PSD2 compliant.
Written By Sergiu Biris
Last updated 10 days ago
Connecting your bank is designed so that we never see or hold your banking credentials.
What protects you
- Your credentials are never stored. You sign in on your bank's own secure page, not in Invoflux. Your login is never shared with us.
- Read-only access. The connection can read your transactions to reconcile them. It cannot move money or make changes.
- 256-bit encryption. All bank connections are encrypted.
- Licensed and regulated. Connections run through a licensed open banking provider, and Invoflux is PSD2 compliant and regulated in the EU.
The 90-day re-authorization
EU banking rules (PSD2) require you to re-authorize your bank every 90 days. When that period ends, new transactions pause until you sign in to your bank again. This is a regulatory protection, not a problem with your account.
Result
Invoflux can keep your reconciliation up to date using read-only transaction data, while your bank login and the ability to move money stay entirely with you and your bank.
Related
- Connect your bank account
- Bank connection failed: what to do
- Is my data secure?