Security overview

Read-only by design.

DimeProof is designed to organize spending evidence without moving money or modifying mailboxes.

Bank access

Users connect through Plaid Link. DimeProof requests transaction access only, does not receive bank passwords, and cannot initiate payments.

Email access

Email integrations are read-only. DimeProof scans selected labels or folders for receipt evidence and does not send, delete, move, or modify messages.

Encrypted tokens

Provider OAuth tokens are encrypted server-side and are never returned to the browser.

Review language

DimeProof says potential discrepancy, possible duplicate, and review recommended. It does not claim fraud or definite account errors.

Production mailbox access for Gmail, Microsoft, and Yahoo requires provider approval and verified callback URLs on this domain.