Is MX safe? Security & your data (2026)

MX is a security- and privacy-forward financial data platform, built to keep you in control of your data. It connects apps to your bank and brokerage accounts and states plainly that it does not sell your personal data. It encrypts your data in transit and at rest, is independently audited under SOC 2 Type II every year, and supports OAuth connections you approve, manage and revoke. Below: how MX secures the connection, what it does with your data, and how you stay in control.

Where we stand: Truthifi doesn't connect through MX; it uses Plaid, Yodlee and ByAllAccounts. We cover MX here for completeness, and the key claims below link to MX's own trust and privacy pages so you can check them yourself.

What is MX?

MX Technologies is a financial data platform that connects the apps you use to your bank or brokerage so they can read your balances and transactions with your permission. A privately held company based in Lehi, Utah, MX is open-finance infrastructure for banks, credit unions and fintechs. It's similar plumbing to Plaid, Yodlee and Finicity, though you may not see its name on a link screen, because MX often works behind the scenes for the institution you're using. What stands out about MX is how far forward it puts privacy and security in how it describes itself. Get started with Truthifi

For how MX compares with the other major aggregators, see our parent guide to connecting your accounts.

How does MX protect your data? (is MX secure?)

MX connects apps to your accounts through secure, consumer-permissioned connections. At supporting institutions you sign in on your bank's own site, and the connecting app receives a token rather than your username and password. According to MX's trust page, it encrypts data at rest with AES-256 and in transit with TLS, maintains a SOC 2 Type II report that it updates annually, and hosts data in secure U.S. data centers.

OAuth at supporting banks: MX supports OAuth 2.0 credential-free connections, so at supporting institutions you authenticate on your bank's own site and your login isn't shared with MX or the app.
Tokenization + encryption: the connecting app receives a revocable token rather than your raw login, with data encrypted both in transit and at rest.
Independent audits: MX publishes a SOC 2 Type II report (updated annually), and it builds on the FDX open-finance standard. MX's trust page describes these controls in its own words.

Where Truthifi fits: Truthifi's access to your bank and brokerage accounts is read-only. Your AI assistant can look, but it can't move money, place trades or change anything in those accounts. You sign in to your bank or broker through Truthifi's connection partner (Plaid, Yodlee or ByAllAccounts), not through Truthifi, and Truthifi doesn't see or store your bank username or password. Learn how Truthifi keeps your accounts secure

Does MX sell my data?

No. MX states that it does not sell your personal data, and it markets itself on a privacy-first stance. Like other aggregators, MX may use de-identified, aggregated data for research and benchmarking, with personal identifiers removed; its privacy page describes how it handles data. The data MX moves for an app is the slice that app needs, shared with your permission, and you stay in control of who sees it.

Before you link through any app, it's always worth reading that app's privacy policy alongside MX's privacy notice, since together they govern where your data goes. Truthifi, for its part, doesn't sell your personal information either.

How do I see and remove MX connections? (revoke / delete)

Because MX usually works behind the scenes for a bank or app rather than as a consumer brand, start where you authorized the connection: the app or institution you linked, and your bank's connected-apps settings. Revoking stops future access. To remove data already collected, ask the app and MX through its privacy channel.

Whichever aggregator connects your accounts, Truthifi puts your linked accounts in one view and checks them for fees, concentration and other issues. Run a free Truthifi checkup on your own accounts → (limits apply).

Start where you authorized it. Revoke through the app or institution where you linked your accounts; MX typically has no consumer-wide portal of its own.
Check your bank's settings. Review your bank's connected-apps settings and remove any link you no longer use.
Request deletion. Revoking stops future access only; to remove data already collected, ask the app and MX through its privacy channel.

What Truthifi adds on top of any aggregator

Truthifi's connection to your accounts is independent of any MX link an app may use. Connect once and we clean and organize what each institution sends, down to labeling reinvested dividends correctly and matching the same security across accounts, so your AI assistant reads the same figures you do. Here's what that layer looks like, side by side with an aggregator alone:

What you get	With an aggregator alone	With your aggregator + Truthifi
Secure connection to your bank and brokerage accounts	✓	✓
Balances and transactions in one place	✓	✓
Data cleaned and organized across institutions	✗	✓
History rebuilt from the transactions your bank or broker makes available (how far back depends on the institution)	✗	✓
130+ kinds of issues checked, including fees and concentration	✗	✓
Your Truthifi Score, how it has changed over time, and the findings behind it	✗	✓
Coverage through Plaid, Yodlee and ByAllAccounts	✗	✓

Truthifi connects through Plaid, Yodlee and ByAllAccounts, so it isn't tied to a single network. Check the status of your bank or broker at truthifi.com/connections before you link it.

Ask your own AI assistant about your accounts

Every current consumer plan, free ones included, comes with Truthifi's MCP server. MCP (Model Context Protocol) is an open standard that lets AI assistants connect to outside tools and data. Connect an assistant such as Claude from its own connector menu, then sign in to Truthifi and choose Authorize. For most assistants there's no API key to enter, and you don't need spreadsheets or code. The built-in Truthifi AI agent is also included with Monitoring and Monitoring Plus+. Connect Truthifi to your AI agent.

Then ask: "Which of my accounts costs me the most in fees?" You see the fees on each account, by type (in your own AI assistant this needs Connect Max, Monitoring or Monitoring Plus+). Deeper questions, such as your returns against a benchmark, depend on your plan. Truthifi is not an investment adviser and doesn't give investment, tax or legal advice.

Connect free and run your checkup → (Free Checkup is free, limits apply.)

One picture for investors, advisors and firms

The same cleaned picture shows how your money splits by asset class, sector, industry and country, and Truthifi checks it for fees, concentration and other issues. On paid plans and Connect Explore, Truthifi refreshes your data automatically once a day, when the connection to your bank or broker is working.

As an investor, you get fees, performance and your Truthifi Score together in one place, and if you work with an advisor or a firm, you can share the accounts you choose with them. Whatever you've chosen to share is visible to your advisor, and you can stop sharing whenever you like. See how Truthifi keeps your accounts secure

Plan prices are on the pricing page. → How Truthifi Connect works

Truthifi for financial advisors

Advisors and firms can sponsor their clients. A sponsored client's Truthifi plan is free, paid for by the advisor or firm, and the client decides what to share and can turn sharing off at any time, so you're both working from the same numbers.

→ Truthifi for Advisors · Request a demo

Frequently asked questions

Is MX legit?

Yes. MX Technologies is an established, privately held financial data platform based in Lehi, Utah, used by banks, credit unions and fintechs. It encrypts data in transit and at rest, publishes a SOC 2 Type II report (updated annually), and supports OAuth 2.0 connections, so at supporting banks you sign in on your bank's own site.

Does MX sell my data?

No. MX states that it does not sell your personal data and positions itself as privacy-first. Like other aggregators it may use de-identified, aggregated data for research and benchmarking, with personal identifiers removed. Its privacy notice is the place to confirm the current details before you link.

Who owns MX?

MX Technologies is a privately held company headquartered in Lehi, Utah. It's an independent open-finance infrastructure provider rather than a bank or credit union.

Is MX safe to use with my bank login?

At supporting institutions MX uses OAuth 2.0, so you authenticate on your bank's own site and the connecting app receives a token rather than your raw password. MX encrypts data in transit and at rest and is SOC 2 Type II audited.

How do I remove or delete MX?

Revoke through the app or institution where you authorized the connection, and your bank's connected-apps settings, since MX usually has no consumer-wide portal. Revoking stops future access, so also ask the app and MX's privacy channel to delete data already collected.

Does Truthifi use MX?

No. Truthifi connects your accounts through Plaid, Yodlee and ByAllAccounts. You can still use Truthifi alongside an app that connects you through MX: Truthifi builds its own read-only connection to your accounts and gives you one consistent, cleaned-up picture on top of whatever that app does.

Does Truthifi reach accounts a single aggregator doesn't?

Truthifi isn't limited to one network. By Truthifi's own count (a company-reported figure), it connects to 18,000+ financial institutions through Plaid, Yodlee and ByAllAccounts. Check your bank or broker's status at truthifi.com/connections before you link it, since statuses change.

---

About the author

Truthifi Bot drafts these guides from Truthifi's data and public sources. Every page is reviewed by the Truthifi Team before publishing.

Reviewed by Truthifi Team

What is MX?

MX Technologies is a financial data platform that connects the apps you use to your bank or brokerage so they can read your balances and transactions with your permission. A privately held company based in Lehi, Utah, MX is open-finance infrastructure for banks, credit unions and fintechs. It's similar plumbing to Plaid, Yodlee and Finicity, though you may not see its name on a link screen, because MX often works behind the scenes for the institution you're using. What stands out about MX is how far forward it puts privacy and security in how it describes itself. Get started with Truthifi

For how MX compares with the other major aggregators, see our parent guide to connecting your accounts.

How does MX protect your data? (is MX secure?)

MX connects apps to your accounts through secure, consumer-permissioned connections. At supporting institutions you sign in on your bank's own site, and the connecting app receives a token rather than your username and password. According to MX's trust page, it encrypts data at rest with AES-256 and in transit with TLS, maintains a SOC 2 Type II report that it updates annually, and hosts data in secure U.S. data centers.

OAuth at supporting banks: MX supports OAuth 2.0 credential-free connections, so at supporting institutions you authenticate on your bank's own site and your login isn't shared with MX or the app.
Tokenization + encryption: the connecting app receives a revocable token rather than your raw login, with data encrypted both in transit and at rest.
Independent audits: MX publishes a SOC 2 Type II report (updated annually), and it builds on the FDX open-finance standard. MX's trust page describes these controls in its own words.

Where Truthifi fits: Truthifi's access to your bank and brokerage accounts is read-only. Your AI assistant can look, but it can't move money, place trades or change anything in those accounts. You sign in to your bank or broker through Truthifi's connection partner (Plaid, Yodlee or ByAllAccounts), not through Truthifi, and Truthifi doesn't see or store your bank username or password. Learn how Truthifi keeps your accounts secure

Does MX sell my data?

No. MX states that it does not sell your personal data, and it markets itself on a privacy-first stance. Like other aggregators, MX may use de-identified, aggregated data for research and benchmarking, with personal identifiers removed; its privacy page describes how it handles data. The data MX moves for an app is the slice that app needs, shared with your permission, and you stay in control of who sees it.

Before you link through any app, it's always worth reading that app's privacy policy alongside MX's privacy notice, since together they govern where your data goes. Truthifi, for its part, doesn't sell your personal information either.

How do I see and remove MX connections? (revoke / delete)

Because MX usually works behind the scenes for a bank or app rather than as a consumer brand, start where you authorized the connection: the app or institution you linked, and your bank's connected-apps settings. Revoking stops future access. To remove data already collected, ask the app and MX through its privacy channel.

Whichever aggregator connects your accounts, Truthifi puts your linked accounts in one view and checks them for fees, concentration and other issues. Run a free Truthifi checkup on your own accounts → (limits apply).

Start where you authorized it. Revoke through the app or institution where you linked your accounts; MX typically has no consumer-wide portal of its own.
Check your bank's settings. Review your bank's connected-apps settings and remove any link you no longer use.
Request deletion. Revoking stops future access only; to remove data already collected, ask the app and MX through its privacy channel.

What Truthifi adds on top of any aggregator

Truthifi's connection to your accounts is independent of any MX link an app may use. Connect once and we clean and organize what each institution sends, down to labeling reinvested dividends correctly and matching the same security across accounts, so your AI assistant reads the same figures you do. Here's what that layer looks like, side by side with an aggregator alone:

What you get	With an aggregator alone	With your aggregator + Truthifi
Secure connection to your bank and brokerage accounts	✓	✓
Balances and transactions in one place	✓	✓
Data cleaned and organized across institutions	✗	✓
History rebuilt from the transactions your bank or broker makes available (how far back depends on the institution)	✗	✓
130+ kinds of issues checked, including fees and concentration	✗	✓
Your Truthifi Score, how it has changed over time, and the findings behind it	✗	✓
Coverage through Plaid, Yodlee and ByAllAccounts	✗	✓

Truthifi connects through Plaid, Yodlee and ByAllAccounts, so it isn't tied to a single network. Check the status of your bank or broker at truthifi.com/connections before you link it.

Ask your own AI assistant about your accounts

Every current consumer plan, free ones included, comes with Truthifi's MCP server. MCP (Model Context Protocol) is an open standard that lets AI assistants connect to outside tools and data. Connect an assistant such as Claude from its own connector menu, then sign in to Truthifi and choose Authorize. For most assistants there's no API key to enter, and you don't need spreadsheets or code. The built-in Truthifi AI agent is also included with Monitoring and Monitoring Plus+. Connect Truthifi to your AI agent.

Then ask: "Which of my accounts costs me the most in fees?" You see the fees on each account, by type (in your own AI assistant this needs Connect Max, Monitoring or Monitoring Plus+). Deeper questions, such as your returns against a benchmark, depend on your plan. Truthifi is not an investment adviser and doesn't give investment, tax or legal advice.

Connect free and run your checkup → (Free Checkup is free, limits apply.)

One picture for investors, advisors and firms

The same cleaned picture shows how your money splits by asset class, sector, industry and country, and Truthifi checks it for fees, concentration and other issues. On paid plans and Connect Explore, Truthifi refreshes your data automatically once a day, when the connection to your bank or broker is working.

As an investor, you get fees, performance and your Truthifi Score together in one place, and if you work with an advisor or a firm, you can share the accounts you choose with them. Whatever you've chosen to share is visible to your advisor, and you can stop sharing whenever you like. See how Truthifi keeps your accounts secure

Plan prices are on the pricing page. → How Truthifi Connect works

Truthifi for financial advisors

Advisors and firms can sponsor their clients. A sponsored client's Truthifi plan is free, paid for by the advisor or firm, and the client decides what to share and can turn sharing off at any time, so you're both working from the same numbers.

→ Truthifi for Advisors · Request a demo

Frequently asked questions

Is MX legit?

Yes. MX Technologies is an established, privately held financial data platform based in Lehi, Utah, used by banks, credit unions and fintechs. It encrypts data in transit and at rest, publishes a SOC 2 Type II report (updated annually), and supports OAuth 2.0 connections, so at supporting banks you sign in on your bank's own site.

Does MX sell my data?

No. MX states that it does not sell your personal data and positions itself as privacy-first. Like other aggregators it may use de-identified, aggregated data for research and benchmarking, with personal identifiers removed. Its privacy notice is the place to confirm the current details before you link.

Who owns MX?

MX Technologies is a privately held company headquartered in Lehi, Utah. It's an independent open-finance infrastructure provider rather than a bank or credit union.

Is MX safe to use with my bank login?

At supporting institutions MX uses OAuth 2.0, so you authenticate on your bank's own site and the connecting app receives a token rather than your raw password. MX encrypts data in transit and at rest and is SOC 2 Type II audited.

How do I remove or delete MX?

Revoke through the app or institution where you authorized the connection, and your bank's connected-apps settings, since MX usually has no consumer-wide portal. Revoking stops future access, so also ask the app and MX's privacy channel to delete data already collected.

Does Truthifi use MX?

No. Truthifi connects your accounts through Plaid, Yodlee and ByAllAccounts. You can still use Truthifi alongside an app that connects you through MX: Truthifi builds its own read-only connection to your accounts and gives you one consistent, cleaned-up picture on top of whatever that app does.

Does Truthifi reach accounts a single aggregator doesn't?

Truthifi isn't limited to one network. By Truthifi's own count (a company-reported figure), it connects to 18,000+ financial institutions through Plaid, Yodlee and ByAllAccounts. Check your bank or broker's status at truthifi.com/connections before you link it, since statuses change.

---

About the author

Truthifi Bot drafts these guides from Truthifi's data and public sources. Every page is reviewed by the Truthifi Team before publishing.

Reviewed by Truthifi Team

Is MX safe? How the privacy-first data platform protects your data (2026)

Want to hook AI up to your finances?

Is MX safe? How the privacy-first data platform protects your data (2026)

Want to hook AI up to your finances?

Is MX safe? How the privacy-first data platform protects your data (2026)

Want to hook AI up to your finances?

In this article

What is MX?

How does MX protect your data? (is MX secure?)

Does MX sell my data?

How do I see and remove MX connections? (revoke / delete)

What Truthifi adds on top of any aggregator

Ask your own AI assistant about your accounts

One picture for investors, advisors and firms

Truthifi for financial advisors

Frequently asked questions

Is MX legit?

Does MX sell my data?

Who owns MX?

Is MX safe to use with my bank login?

How do I remove or delete MX?

Does Truthifi use MX?

Does Truthifi reach accounts a single aggregator doesn't?

Read next from the Truthifi blog

What is MX?

How does MX protect your data? (is MX secure?)

Does MX sell my data?

How do I see and remove MX connections? (revoke / delete)

What Truthifi adds on top of any aggregator

Ask your own AI assistant about your accounts

One picture for investors, advisors and firms

Truthifi for financial advisors

Frequently asked questions

Is MX legit?

Does MX sell my data?

Who owns MX?

Is MX safe to use with my bank login?

How do I remove or delete MX?

Does Truthifi use MX?

Does Truthifi reach accounts a single aggregator doesn't?

Read next from the Truthifi blog

Want to hook AI up to your finances?

Want to hook AI up to your finances?

Want to hook AI up to your finances?