/
Bank Connect (Powered by Plaid) - Flow

Bank Connect (Powered by Plaid) - Flow

Owned by Ushank Khanna
Mar 07, 2022
2 min read

Plaid Link is the client-side component that your users will interact with in order to link their accounts to Plaid and allow you to access their accounts via the Plaid API.

Plaid Link will handle credential validation, multi-factor authentication, and error handling for each institution that we support. Link works across all modern browsers and platforms, including web, iOS, Android, as well as via React Native and mobile webviews.

Bank Connect - Powered by Plaid is a 100% salesforce native solution. The app/plugin provides seamless integration between salesforce and plaid. The app stores all the data inside the salesforce (client org) and the data is only accessible to the authorized users.

FLOW:

The Plaid flow begins when your user wants to connect their bank account to your app.

  1. Call /link/token/create to create a link_token and pass the temporary token to your app's client.

  2. Use the link_token to open the Link for your user. In the onSuccess callback, Link will provide a temporary public_token.

  3. Call /item/public_token/exchange to exchange the public_token for a permanent access_token and item_id for the new Item.

  4. Store the access_token and use it to make product requests for your user's Item.

Once the authentication and authorization steps are completed by the end client, salesforce will pull the data using the plaid APIs (Identity, Transactions, Assets, Income). The transaction and assets will come as a webhook.

Important Points -

  • Bank Connect is a 100% native application on salesforce hence we inherit all the compliance and security policies of the salesforce platform. The compliance certificate can be accessed here.

  • Cloud Maven, Inc doesn’t store nor transmit any data using our servers. We don’t have access to the client’s data in-transit or rest.

  • Data in-transmit is encrypted using the TLS protocol.

  • All data will be stored on the Salesforce platform.

  • The plaid auth token is encrypted using AES 256 and can’t be viewed by cloud maven or the customer admins.

  • Data at rest outside salesforce is encrypted using AES 256 encryption. Data in the salesforce can be encrypted using the salesforce shield product.