Read-only by design. Your money never moves through Vecta.
Trust isn’t a feature, it’s the architecture. Here’s exactly how Vecta handles your financial data.
How consent works
Bank connections use Australia’s Consumer Data Right (CDR), the government-regulated framework for data sharing. Every connection starts and ends with your explicit consent.
You choose an institution
Pick your bank or broker inside Vecta.
You authenticate with them
You're taken to your institution's own consent flow. Your credentials never touch Vecta.
You approve exactly what's shared
Account names, balances and transactions. Nothing more. For a period you control.
Data flows read-only
Vecta receives view-only data through regulated, encrypted channels. Revoke anytime.
What Vecta can see
- Account names and balances
- Transactions and categories
- Investment holdings and values
What Vecta can never do
- See or store your bank passwords
- Move money or place trades
- Change anything on your accounts
- Share or sell your data
Infrastructure and data handling
Encryption everywhere
TLS 1.2+ in transit, AES-256 at rest. Secrets are managed in a dedicated vault, never in code.
Australian data residency
Your financial data is stored in Australian data centres (Sydney region).
Deletion on request
Delete your account and all associated data permanently, anytime, from settings. No email required.
Found a vulnerability? We take responsible disclosure seriously. Email contact@vectapp.io.
See your whole financial picture in minutes.
Free to start. No card required. Read-only, always.
Get started free