Security and reporting

If you find a suspected vulnerability, email security@realiplan.com with reproduction steps, the affected URL and potential impact. Do not include passwords, API keys, bank details or another person's information.

Limit testing to accounts and data you own. Do not access others' data, disrupt service or publish details that put users at risk. This page does not authorize intrusive testing or promise a bounty.

You can use RealiPlan without connecting a bank. Optional bank connections are read-only; RealiPlan does not move money. Review our privacy policy and subprocessors to understand data processing.