I'm working on a financial app that uses Plaid to provide financial data and updates as users spend money.
As of right now, I'm using Hashicopr's Vault to encrypt the transaction/bank account data, which should hopefully help prevent hackers seeing the data if the database ever gets dumped (luckily no actionable financial data exists, simply transactional data).
The problem here, however, is that if I wanted to I could decrypt (using Vault) any user's data as the owner of the app. I don't want to be able to do that.
Is there a way to encrypt incoming data from Plaid and make it available to the user through a web UI, without me being able to decrypt it as the developer of the app?
Unfortunately private keys won't work since I would have to store them to encrypt the data coming in from Plaid.
Thanks so much!