Third Party Index

Snapshot 34821

Document
Trust center
URL
https://security.plaid.com/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
browser
Size
661442 bytes
SHA-256 (raw)
df4723fc4d93857fa5611799028f830cd8e85a32b2ab67336765e31cd1ce554f
SHA-256 (normalized text)
20411e6c134e18c888cbe714cb5bd637821032de0ed0afc3c43110a91f111135

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Plaid
Plaid is focused on democratizing financial services through technology. We build beautiful consumer experiences, developer-friendly infrastructure, and intelligent tools that give everyone the ability to create amazing products that solve big problems. Plaid helps you safely connect your financial accounts to the apps and services you love. We were founded on the principle that consumers have a right to their financial information. Consumers decide where, how, and with whom it’s shared. That’s why every Plaid product is built with meaningful control and security in mind.
Profile URL
https://security.plaid.com/
Profile ID
0bc29e6c-f59f-4f47-9904-92137e7e44d3
Published
2026-09-30T21:08:19.366416+00:00
Last updated
2026-09-30T21:17:15.140544+00:00
Certifications
SOC 2 Type 2
ISO-27001
ISO 27701
TruSight
Doyensec
AWS Foundational Technical Review
Updated: September 30, 2026
Plaid Security Portal Overview
Plaid is focused on democratizing financial services through technology. We build beautiful consumer experiences, developer-friendly infrastructure, and intelligent tools that give everyone the ability to create amazing products that solve big problems. Plaid helps you safely connect your financial accounts to the apps and services you love. We were founded on the principle that consumers have a right to their financial information. Consumers decide where, how, and with whom it’s shared. That’s why every Plaid product is built with meaningful control and security in mind.
SOC 2 Type 2
ISO-27001
ISO 27701
TruSight
Doyensec
AWS Foundational Technical Review
Controls
Compliance and Independent Testing
SOC 2 Type II Report
ISO 27001 / 27701 Certification
Penetration Testing
Governance
Information Security Governance
Security Policies and Standards
Organizational Structure and Defined Roles
Security Risk Management
Security Risk Management Program
Risk Mitigation Planning
Security Impact Monitoring
Access Management
Access Control Governance
Role-Based Access Controls
User Provisioning and Deprovisioning
Asset Management
Asset Inventory and Classification
Endpoint Security Management
Cloud Asset Visibility and Tagging
Change and Configuration Management
Change Management Program
Secure Software Development Lifecycle (SDLC)
Code Review and Approval Controls
Encryption and Key Management
Encryption at Rest
Encryption in Transit
Key Management Program
Documents
PDF
SOC 2 Type II with ISAE 3000 Combined Report
PDF
SOC 2 Bridge Letter
PDF
ISO 27001 and ISO 27701
PDF
ISO 27001 SoA Matrix
XLSX
SIG Core Questionnaire
XLSX
CAIQ STAR Security Questionnaire (v4.0.1)
PDF
Plaid Doyensec External Network Pentest (2025)
PDF
Plaid Doyensec API Pentest (2025)
PDF
Plaid Rhino Security Labs (Plaid Dashboard) Pentest (2025)
PDF
Plaid Access and Authentication Controls Policy
PDF
Plaid Access and Authentication Standard
PDF
Plaid Access Controls Procedures
PDF
Plaid Acceptable Use Policy
PDF
Plaid Asset Management Policy
PDF
Plaid Change Controls Policy
PDF
Plaid Customer Oversight Policy
PDF
Plaid Data Classification and Handling Policy
PDF
Plaid Data Loss Prevention Policy
PDF
Plaid Data Retention and Disposal Policy
PDF
Plaid Data Security Standards And Access Guidelines
PDF
Plaid Encryption and Key Management Policy
PDF
Plaid Information Security Policy
PDF
Plaid Logging and Monitoring Policy
PDF
Plaid Personal Information Retention and Disposal Policy - Product
PDF
Plaid System Hardening Standard
PDF
Plaid Technology Risk Management Policy
PDF
Plaid Vendor Management Policy
PDF
Plaid Vulnerability Management Policy
PDF
Plaid Privacy and Security - Incident Response Policy
PNG
Data Flow Diagram
PDF
Open Finance Data Security Standard (OFDSS)
PDF
Data Security Standards and Access Guidelines
PDF
System Hardening Standard
PDF
Disaster Recovery Test Summary Report (2026)
PDF
Plaid Business Continuity and Disaster Recovery Plan
PDF
Plaid General Information
PDF
Plaid Financial Statements Audit (FY2025) Opinion Letter
PDF
Certificate of Insurance
PDF
W-9 Form
PDF
State of Delaware Entity Registration Record
Updates
December 18, 2025 at 8:00 AM UTC
New Compliance Certifications Available (2025)
Plaid has completed its 2025 SOC 2 Type II examination and ISO 27001 certification. Updated reports and certificates are now available in the Security Portal.
September 08, 2025 at 7:00 AM UTC
Plaid not impacted by Salesloft Drift incident
Plaid does not use the Drift Salesforce integration/product. As such, the recent data exposure incidents involving Salesforce systems across the industry do not impact Plaid. We continuously monitor the evolving threat landscape and take appropriate measures to safeguard our systems and customers.
July 25, 2025 at 7:00 AM UTC
SharePoint Vulnerability Advisory (Plaid Is Not Impacted)
On July 20, 2025, CISA issued an alert regarding active exploitation of Microsoft SharePoint vulnerabilities (e.g., CVE-2023-24955, CVE-2023-29357). Plaid Security has reviewed the advisory and confirmed that Plaid is not impacted, as we do not use Microsoft SharePoint in our environment. No action is required at this time. Sincerely, Plaid Security