Felix connects to your bank read-only through Plaid: it can see transactions, and it can never move money. Access tokens are encrypted at rest.
The deeper guarantee is architectural. Under Felix's §0.1 law, the AI never authors a number — every figure on your books is computed by a deterministic ledger from real bank data, so the AI can't fabricate a balance and can't touch your money. The books don't lie.
Your data stays yours: we never sell it, and you can request deletion at any time.