# Plaid

Plaid (plaid.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/plaid
- Documents last verified: 2026-10-02
- Transparency rating: 38/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 14 tracked vendors rely on it directly, 26 within two hops, 183 within three
- Cite as: Plaid, Third Party Index, https://thirdpartyindex.com/vendors/plaid (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.plaid.com/ | 2026-10-02 | 2026-10-02 |
| Privacy policy | https://plaid.com/legal/#privacy-statement | 2026-10-02 | 2026-10-02 |
| Security page | https://plaid.com/trust-safety/ | 2026-10-02 | 2026-10-02 |
| security.txt | https://plaid.com/.well-known/security.txt | 2026-10-02 | 2026-10-02 |
| Status page | https://status.plaid.com/ | 2026-10-02 | 2026-10-02 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Subprocessor of (14)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Aleph](https://thirdpartyindex.com/vendors/aleph.md): Customer data ingestion
- [Campfire](https://thirdpartyindex.com/vendors/campfire.md): Bank connectivity provider. When a customer links a bank account, Plaid retrieves account balances and transactions used for bank feeds and reconciliation. Camp…
- [Carta](https://thirdpartyindex.com/vendors/carta.md): Bank integration
- [Deltek](https://thirdpartyindex.com/vendors/deltek.md): Bank transaction aggregation and payment reconciliation automation
- [Expensify](https://thirdpartyindex.com/vendors/expensify.md): Member Data and Personal Data; Transaction import
- [Figure](https://thirdpartyindex.com/vendors/figure.md)
- [Hadrius](https://thirdpartyindex.com/vendors/hadrius.md)
- [Harvest](https://thirdpartyindex.com/vendors/harvest.md): Payments processor
- [Intapp](https://thirdpartyindex.com/vendors/intapp.md): Data feeds from financial institutions
- [Light](https://thirdpartyindex.com/vendors/light.md): Bank account connectivity for United States institutions. Processes data for verification and fraud prevention under its own obligations.
- [MangoApps](https://thirdpartyindex.com/vendors/mangoapps.md): Financial Account Connectivity (optional)
- [Telnyx](https://thirdpartyindex.com/vendors/telnyx.md): Plaid is used to connect with users' bank accounts to verify account holder’s information, authenticate accounts, and facilitate transactions. Personal data p…
- [Tesorio](https://thirdpartyindex.com/vendors/tesorio.md): Bank Data Processing
- [Valid8 Financial](https://thirdpartyindex.com/vendors/valid8-financial.md): Bank transaction download, bank transaction classification; Data storage and processing

## Security contact

From its security.txt (https://plaid.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/34468)):

- Contact: https://hackerone.com/plaid
- Contact: mailto:security@plaid.com
- Acknowledgments: https://hackerone.com/plaid/thanks
- Security jobs: https://plaid.com/careers/
- Languages: en
- Valid until 2026-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api