Client-authorized account connection

Financial data is requested for reconstruction—not ordinary browsing.

Plaid Transactions access is an optional, separately consented workflow for engaged clients. Bank authentication happens inside Plaid Link after secure-portal authentication.

Current product boundary

Transactions only

Plaid Auth is not enabled. TPD does not request account or routing numbers for the reconstruction workflow.

Issued only when required for an accepted engagement

Before Link opens

The consent screen tells you exactly what is requested and why.

Account connection is never offered through the public review form. When it is necessary for an accepted engagement, the client receives instructions inside the private workspace and chooses whether to authorize it.

Go to secure access

Data requested: Posted and pending transaction dates, amounts, descriptions, merchant or counterparty details, categories, payment channel, pending status, and currency; plus institution and provider identifiers, account name, official name, mask, type/subtype, balances, and currency when returned by the institution.
History window: Up to 730 days (24 months) through Plaid. Older periods require statements or exports delivered through the secure portal.
Purpose: Client-authorized transaction reconstruction, source matching, and workpaper preparation for the stated engagement.
Authentication: Plaid Link—not TPD—handles the bank sign-in. TPD does not receive or store your online-banking password.
Not requested: SSN, tax-return content, bank password, PIN, MFA code, and Plaid Auth account/routing data.

Connection lifecycle

Authorization remains under client control.

Connection status, consent, revocation, and deletion are distinct records so the system can show what access ended and what retained engagement records still require a separate deletion decision.

Authorize

Review the data categories and purpose, then authorize Link from the secure portal.

Revoke

When enabled, disconnect through the portal or begin an identity-verified support request. TPD then blocks local use and starts provider-side Item removal under the documented lifecycle.

Delete

When enabled, request imported-data deletion separately. Completion is communicated only after the private vault confirms the result, including any category retained for a documented requirement.

Use your secure client workspace for an authenticated revocation or deletion request. If access is unavailable, use the client-access support channel. Include only your name and engagement reference; do not email account details or tax documents.