Data in Transit
All PinnBankTX login sessions establish a TLS 1.3 encrypted tunnel before any credentials are transmitted. We do not support TLS 1.0 or 1.1 — those protocols were deprecated years ago, and we removed them from our infrastructure in 2021. Certificate pinning on our mobile apps prevents man-in-the-middle attacks even on compromised Wi-Fi networks. Your session token rotates every 5 minutes, and the entire connection terminates after 10 minutes of inactivity.
Pinnacle Bank does not use shared hosting or third-party CDN nodes for authenticated sessions. Your banking data routes through dedicated infrastructure in two SOC 2 Type II audited data centres located in Texas. Geographic data residency is not a marketing claim — it is an architectural decision enforced at the network level.

