Security & Trust

Built like it's guarding our own money.

Because it is. PortWorth was built by its founder to manage his own family's wealth first, so the security decisions were made for our money before they were made for yours.

The four principles

You don’t have to take our word for it

No vague promises. These are the four commitments every part of PortWorth is built around, and you can check each one yourself from your first session.

Encrypted, Everywhere

Your data is encrypted in transit with the same TLS technology your bank uses, and encrypted at rest on enterprise-grade cloud infrastructure. Sensitive credentials you store with us receive an additional layer of encryption of their own.

No Broker Passwords. Ever.

We never ask for your broker or bank login. Not at signup, not ever. You import statements and CSV exports yourself. There is no standing connection to your accounts, which means PortWorth can't trade, transfer, or touch your money. Tracking only, by design.

Sign-In, Layered

Passkeys (Face ID, Touch ID, Windows Hello), authenticator-app two-factor codes that work once and only once, Google and Apple sign-in, and sessions that expire automatically. Signing out revokes access immediately, everywhere.

Your Data Is Yours

We're funded by subscriptions, not by your data. Nothing is sold, rented, or shared with advertisers or data brokers, and if you leave, you delete your account yourself in one click and everything goes with it, immediately.

Defence in depth

What stands between your data and everything else.

Layer 01

Access control on every request

Every single request to your data is authenticated and role-checked. There are no "trusted" paths. You see your portfolio and nothing else; nobody else sees yours.

Layer 02

Sharing that can't outlive its welcome

Share links for your accountant or adviser are read-only, scoped to only the sections you choose, expire automatically (30 days at most), and can be revoked by you at any moment.

Layer 03

Backups and monitoring, around the clock

Automated encrypted backups run nightly, an independent error-monitoring service watches the platform continuously, and every change to your portfolio is recorded in an audit trail you can review yourself.

AI, with boundaries

Exactly what the AI sees, and what it can say.

PortWorth uses Anthropic's Claude to write your intelligence reports, alerts and answers. Vague reassurance is worth nothing here, so this is the specific arrangement.

What gets sent

When you ask a question or a report runs, a summary of your position goes to Anthropic's API: ticker symbols, position sizes, values, and the category totals behind your net wealth. That is what makes an answer about your money possible rather than a generic one.

What never gets sent

Your name, email, account numbers, tax file number, bank or broker credentials, and any document you have uploaded. The AI reasons about figures, not about your identity.

Never used for training

Data sent through Anthropic's API is not used to train their models, under their API terms. Your financial life powers your insights and nobody's model.

It cannot advise you

A guardrail is attached to every single AI request on our servers, before your question reaches the model, and it cannot be overridden from the browser. The AI gives general information and factual analysis. It will not tell you to buy, sell or hold, because we hold no AFSL and personal financial advice is not ours to give.

Only when you ask

AI features are opt-in and the platform works fully without them. Scheduled reports and alerts can be switched off in Settings, and every AI-written page says so on its face.

Assistants you connect are different

You can also connect an outside assistant such as Claude or ChatGPT, or anything speaking the same protocol, and let it read your account. Everything above describes the AI we run. A connected assistant is one you chose: what it reads goes to that provider under their terms, our guardrail does not reach it, and it may say things we would not. It is off unless you set it up, and every other part of PortWorth works without it.

You tick what it may read

Connecting one means signing in and choosing category by category: holdings, property, tax, spending, document names, entities, accountant notes. What you leave unticked is not readable, and the assistant is never even told those tools exist. Access is read-only: it can never move money, place a trade, or change a figure. Document contents are never available, only file names and dates.

Disconnect means now

Every read a connected assistant performs is logged and shown to you in Settings, and we email you the moment a new one connects. Disconnecting takes effect on the click, not whenever its access token would have expired. Deleting your account revokes every connection with it. How to connect one →

It can be wrong

AI output can be incomplete or mistaken, and market data can be delayed. Everything it produces is general information to inform your own thinking, not a substitute for a licensed adviser who knows your circumstances.

Analytics stay separate

Optional usage analytics never touch this. They record which screens were opened, nothing about your holdings, and they are off unless you turn them on in Settings → Privacy & Data.

Leaving takes one click

Delete your account yourself in Settings → Privacy & Data. Everything is erased immediately, permanently, with no waiting period and nothing kept back.

The short list

What we never do

Never sell your data

Not to advertisers, not to data brokers, not to "partners". Subscriptions pay for PortWorth, so you are the customer, not the product.

Never hold your logins

No broker passwords, no bank credentials. We can't lose what we never ask for.

Never touch your money

PortWorth has no ability to trade, withdraw or transfer. It is a mirror of your wealth, not a hand on it.

Never train AI on you

Your financial life powers your insights, and nobody's models.

Common questions

Common security questions

Can PortWorth access my brokerage or bank account?

No. You import statements and CSV exports yourself. There is no standing connection to your accounts and no ability to trade or move money. For crypto exchanges, you can optionally connect a read-only API key, which by definition cannot trade or withdraw.

Where is my data stored?

On enterprise-grade cloud infrastructure with redundancy and automated encrypted backups. Data is encrypted in transit and at rest.

What exactly does my accountant see when I share?

Only the sections you tick when creating the link, nothing more. The link is read-only, cannot be used to log in, expires automatically (30 days maximum), and you can revoke it at any time from your Settings.

What happens to my data if I cancel?

Your account downgrades and your data remains yours. You can export your records, and you can request full deletion at any time.

I think I've found a security issue. Who do I tell?

Please tell us first. Report it through our contact form marked "Security" and we will respond promptly. We're grateful to anyone who discloses responsibly.

Ready when you are

The things nobody asks about

Start with the free plan, look around, and hold us to every word on this page.