Privacy and security

Our commitment to you

Monarch helps you safely do more with your money. Here’s how we deliver on best-in-class security and transparency.

You're always in control

We have read-only permissions and can’t access your money, ever.

Bank-level security

We use top encryption protocols and multi-factor authentication to guard your data.

Built for you, not advertisers.

Monarch is privacy-first and ad-free. No distractions, just financial clarity.

Built on trust from day one

When we built Monarch, we started with a simple truth: your financial data is deeply personal. We saw too many financial apps treating their users as the product—selling data, serving ads, and prioritizing everyone except the people actually using the app.

That's why the privacy and security of your data isn't just a feature we added or a box we check. It's been a core principle since day one, and it always will be. We're committed to building a product and a team that protects your privacy, and to providing transparency about the measures we take to deliver on this promise.

Thanks for trusting us to be a partner on your financial journey.

Ozzie Osman

Co-founder, Head of Engineering and Security

Monarch leads the industry with protocol that protects your data

Authentication protection
  • Two-factor authentication (2FA)
  • One-time passcodes (OTP) when logging in from unrecognized devices
  • Password breach warnings
Two-way data encryption
  • All data is covered at rest and in transit
  • Protects against illicit interception during transmission
  • Secures stored data from unauthorized access

Vetted third-party partners

We ensure our data providers maintain very strict security practices including encryption, role-based access controls at each layer of their infrastructure, publishing a SOC 2 type 2 report, API traffic control, and one of the strongest bug bounty programs in the industry.

SOC 2 certified

SOC 2 certification might sound technical, but here's what it means for you: independent auditors have verified that we meet strict security standards for protecting your data. We don't just talk about security, we prove it meets the highest industry benchmarks through third-party review.

FAQs

Once you've signed up for Monarch, you'll connect your various financial accounts - like banks, credit cards, retirement accounts, and more - via one of our secure third-party data providers. Monarch does not directly access your account and money cannot be moved in or out of your bank accounts from within Monarch.

Monarch does not see or store your login credentials.

All of your data is fully encrypted and protected with bank-level security to ensure your information remains secure and private.

We ensure our data providers maintain very strict security practices including encryption, role-based access controls at each layer of their infrastructure, SOC 2 type 2 compliance, API traffic control, and bug bounty programs.

We only use the minimum data that’s strictly necessary for a given task or use case, and your data is not retained or stored by third-party models after processing. We do not allow third-party providers to use your data to train their models, nor do we use it for training internal models. We have enterprise agreements with the LLM providers that explicitly state they may not store any data, nor are they allowed to use it for any training.

Visit our Trust Center

Get full transparency and more in-depth detail on our compliance program and security controls in our Trust Center.

Visit Trust Center