Security at Frame

Bank-level encryption, strict access controls, and zero data sharing. Your financial data is protected at every layer.

AES-256TLS 1.3Fiduciary Standard

Encryption & Infrastructure

Enterprise-grade security

Your data is encrypted at every layer and stored on proven cloud infrastructure.

AES-256 encryption at rest

All documents and sensitive data encrypted with AES-256, the same standard used by banks and government agencies.

TLS 1.3 in transit

Every connection uses TLS 1.3 encryption from the moment data leaves your device to our servers.

AWS infrastructure

Stored on Amazon S3, backed by ISO 27001 and numerous security certifications.

Short-lived access credentials

File uploads use temporary signed URLs that expire in minutes. No permanent links to your documents.

Access Control

Strict access & identity

We limit who and what can touch your data.

Read-only account connections

Financial accounts connected through Plaid use read-only access. We can never move money or make changes.

Multi-tenant isolation

Your data is logically separated from other clients at every layer with strict access controls.

Only your planning team

Your data is accessible only to you and your dedicated planning team. No one else.

We never sell your data

Your financial information is never sold, shared with advertisers, or monetized. Period.

Compliance

Trusted partners & standards

We work with industry-leading, certified partners.

Plaid for secure aggregation

Industry-standard bank connections with read-only access and end-to-end encryption.

Regular security audits

Our systems and partners undergo regular security assessments to ensure ongoing protection.

Privacy

Your data, your rights

You control your data. Always.

Delete your data anytime

Request complete deletion of all your data at any time, no questions asked.

Full data transparency

See what we have, export your information, and review connected accounts at any time.

No third-party sharing

Your financial information stays between you and your planning team. We never share it.

Questions about security?

We take data protection seriously. Reach out anytime.