Your data is stored on SoFi’s servers and SoFi’s partner, Plaid, servers, which are hosted by Amazon Web Services (“AWS”) in a secure location that includes physical security, fire protection, and electronic shielding. SoFi does not and cannot access your personal account credentials.
Accessing the physical servers requires several levels of authentication, including biometrics, and security personnel monitor the system around the clock. Additionally, Plaid uses encryption at rest to ensure that even AWS personnel do not have access to sensitive data stored on their systems. For more information about Plaid’s information security, please visit https://plaid.com/security/.