[
/security
·
consent first
]
Nothing moves without a grant.
Users sign in with their bank, never with you. Every grant is scoped, dated and written to a ledger they can read and end at any time.
credentials stored
0
revoke takes effect
< 1 s
[
01
·
consent ledger
]
Every grant, on the record.
Your users see this list in their settings. Your auditors get the same list as a CSV. A revoked grant stays on it, crossed out, forever.
Active
access is open and inside its dates
Live
a call is reading data right now
Revoked
ended by the user, your app or the bank
ledger synced
1 s ago
Demo company and illustrative data.
01
Your user’s bank
credentials stay here
02
Consent screen
scopes and dates, in plain words
03
Sluice token vault
encrypted, keys rotated
04
Your app
reads only what was granted
[
02
·
data path
]
Four stops, no detours.
01
The password never leaves the bank
Your user signs in on their bank's own page or app. Sluice receives a token, never a password, and neither do you.
redirect · bank-hosted login
02
The user reads the scopes
Before anything is shared, the consent screen lists each data type, who asks for it and until when. No pre-ticked boxes.
consent.granted · 3 scopes · 90 days
03
Tokens sit in a vault
Tokens are encrypted at rest with keys rotated every 90 days. Staff access is logged and reviewed every week.
token.stored · key v14
04
Your app reads, inside the lines
Every call is checked against the grant. Outside its scopes or past its date, the call is refused and logged.
GET /v3/accounts · 200 · scoped
[
03
·
practices
]
What we do, and what we never do.
01 · credentials
Never stored, never seen
Users sign in with their bank. Sluice and your app only hold scoped tokens.
02 · scopes
Only what was granted
Each token carries its scopes. A call outside them is refused, not logged and forgiven.
03 · encryption
Encrypted at rest and in transit
Tokens and account data are encrypted with keys rotated every 90 days.
04 · audit
A trail you can export
Grants, renewals and revokes export as CSV, with the user, the scope and the second it happened.
05 · retention
Deleted when access ends
When a grant ends, its data is deleted on the schedule you set, 30 days at most.
06 · access
Two people, every time
Production access needs a second engineer to approve it, and the session is recorded.
07 · regions
Data stays in its region
EU accounts are stored in the EU, US accounts in the US. You pick the region per project.
08 · testing
Tested from the outside
Outside testers try to break in twice a year. Fixes and dates are listed in the changelog.
Sluice® Template
$129 · one-time
NOVA STUDIO
/ SECURED BY POLAR