How Mozaic protects your data

How bank connections work, where your data is stored, how it is encrypted, and how to export everything you keep in Mozaic.

Updated

Mozaic can see your balances and transactions, but it can't move your money. Here is how your data is handled, and how to get a copy of it. The full details are on our security page.

Bank and brokerage connections

  • Banks connect through Plaid and brokerages through SnapTrade. You sign in to your bank through them, not through Mozaic.
  • Mozaic never receives your bank username or password. It only receives a read-only access token.
  • That token can't start a transfer, place a trade, change a position or change a beneficiary.
  • When you remove a connection in Mozaic, the token is revoked at the source.

Where your data is stored

Your data is stored in Google Cloud in Montreal, Canada. Mozaic follows Canada's federal privacy law (PIPEDA) and Quebec's Law 25.

Encryption

  • In transit: every connection to Mozaic uses TLS 1.2 or higher.
  • At rest: sensitive fields are encrypted with a separate key for each user. Those keys are protected by a master key held in Google Cloud KMS, and the database itself is also encrypted.

What we don't do

We do not sell your data.

Protect your sign-in

  • Turn on two-factor authentication in Settings > Security > Two-Factor Authentication. It is optional, and it asks for a code from an authenticator app each time you sign in.
  • Mozaic signs you out after 2 hours of inactivity, with a warning 60 seconds before.

Export your data

You can download your data at any time.

  1. Go to Settings > Privacy & Data > Manage Your Data.
  2. On the Export Your Data card, select Export Data.
  3. Save the ZIP file.

The ZIP contains these CSV files:

File What it holds
profile.csv Your profile
accounts.csv Your accounts
transactions.csv Your transactions
holdings.csv Your investment holdings
net_worth.csv Your net worth history
budgets.csv Your budgets
goals.csv Your goals
liabilities.csv Your debt details
recurring_transactions.csv Your recurring transactions

CSV files open in any spreadsheet app.

Delete your data

From the same Manage Your Data page you can delete your account, either after a 30-day grace period or right away. See the related article on deleting your account.

For how we collect and use personal information, read our privacy policy.

Was this article helpful?