Short answer. Plaid reviews your use case, company details, security controls and how end-user data is stored and used before granting production access. Denials usually point to an unclear use case or weak security answers. Fix the gaps, document them and reapply through the dashboard.
Need help applying this to your notice? Request a free written assessment: Plaid case assessment Dwolla case assessment. We reply within one business day. Paid preparation is quoted separately; the platform decides the outcome.
Use case
Explain exactly what data you need and why, and how users benefit. Narrow, clear use cases are easier to approve.
Security
- Encryption in transit and at rest
- Access controls and MFA for staff
- Incident response and data retention policies
Reapplying
Update the questionnaire honestly and attach policies where possible.
FAQs
Do I need SOC 2 for Plaid?
Not always, but documented controls help.
Can a startup get access?
Yes, with a clear use case and good security answers.
Can Plaid suspend live access later?
Yes, if usage changes or policies are breached.
Official sources