How Vognary handles data
The review runs without retaining original uploaded files by default. Signed-in workspace state is stored only when database, session, and token-vault configuration are active.
No passwords or PINs
Vognary never asks for bank passwords, card PINs, UPI PINs, or netbanking credentials.
No backend file storage by default
The current audit and file-import APIs process request data and return results without storing uploaded financial files.
Proof before action
Each suggestion links back to transaction or receipt text so users can verify before acting.
Encrypted workspace storage
Signed-in workspace snapshots and connector secrets use authenticated application-layer encryption; protected routes recheck session and workspace membership.
Approved integrations only
Gmail, Account Aggregator, UPI, and card-mandate integrations require approved scopes, partners, and legal review.
Live status - measured, not promised
These states are read from this deployment's configuration each time the page loads. Anything unproven is labeled that way.
Signed session cookies
ConfiguredSession cookies are signed and expire; unsigned or expired cookies are rejected.
Encrypted token vault
ConfiguredThe vault key passed an encrypt-decrypt round-trip; connector secrets and workspace snapshots are stored encrypted.
Encrypted backups and restore drill
Not yet provenNo backup storage or restore drill is recorded for this deployment.
Identity provider
ConfiguredGoogle sign-in and email magic-link sign-in are both active.
Gmail read-only rail verification
Not yet provenGoogle's restricted-scope review is not complete, so the Gmail rail stays gated.
Regulated bank rails
Not yet provenNo regulated partner rail is engaged; Vognary offers no direct bank, UPI, or card-mandate access.
Background sync schedule
Not yet provenNo production sync schedule has been attested yet.
Retention enforcement schedule
Not yet provenNo production retention schedule has been attested yet.
Renewal alert delivery
Not yet provenProduction renewal-alert delivery has not been attested yet.