Because it is. PortWorth was built by its founder to manage his own family's wealth first, so the security decisions were made for our money before they were made for yours.
No vague promises. These are the four commitments every part of PortWorth is built around, and you can check each one yourself from your first session.
Your data is encrypted in transit with the same TLS technology your bank uses, and encrypted at rest on enterprise-grade cloud infrastructure. Sensitive credentials you store with us receive an additional layer of encryption of their own.
We never ask for your broker or bank login. Not at signup, not ever. You import statements and CSV exports yourself. There is no standing connection to your accounts, which means PortWorth can't trade, transfer, or touch your money. Tracking only, by design.
Passkeys (Face ID, Touch ID, Windows Hello), authenticator-app two-factor codes that work once and only once, Google and Apple sign-in, and sessions that expire automatically. Signing out revokes access immediately, everywhere.
We're funded by subscriptions, not by your data. Nothing is sold, rented, or shared with advertisers or data brokers, and if you leave, you delete your account yourself in one click and everything goes with it, immediately.
Every single request to your data is authenticated and role-checked. There are no "trusted" paths. You see your portfolio and nothing else; nobody else sees yours.
Share links for your accountant or adviser are read-only, scoped to only the sections you choose, expire automatically (30 days at most), and can be revoked by you at any moment.
Automated encrypted backups run nightly, an independent error-monitoring service watches the platform continuously, and every change to your portfolio is recorded in an audit trail you can review yourself.
PortWorth uses Anthropic's Claude to write your intelligence reports, alerts and answers. Vague reassurance is worth nothing here, so this is the specific arrangement.
When you ask a question or a report runs, a summary of your position goes to Anthropic's API: ticker symbols, position sizes, values, and the category totals behind your net wealth. That is what makes an answer about your money possible rather than a generic one.
Your name, email, account numbers, tax file number, bank or broker credentials, and any document you have uploaded. The AI reasons about figures, not about your identity.
Data sent through Anthropic's API is not used to train their models, under their API terms. Your financial life powers your insights and nobody's model.
A guardrail is attached to every single AI request on our servers, before your question reaches the model, and it cannot be overridden from the browser. The AI gives general information and factual analysis. It will not tell you to buy, sell or hold, because we hold no AFSL and personal financial advice is not ours to give.
AI features are opt-in and the platform works fully without them. Scheduled reports and alerts can be switched off in Settings, and every AI-written page says so on its face.
You can also connect an outside assistant such as Claude or ChatGPT, or anything speaking the same protocol, and let it read your account. Everything above describes the AI we run. A connected assistant is one you chose: what it reads goes to that provider under their terms, our guardrail does not reach it, and it may say things we would not. It is off unless you set it up, and every other part of PortWorth works without it.
Connecting one means signing in and choosing category by category: holdings, property, tax, spending, document names, entities, accountant notes. What you leave unticked is not readable, and the assistant is never even told those tools exist. Access is read-only: it can never move money, place a trade, or change a figure. Document contents are never available, only file names and dates.
Every read a connected assistant performs is logged and shown to you in Settings, and we email you the moment a new one connects. Disconnecting takes effect on the click, not whenever its access token would have expired. Deleting your account revokes every connection with it. How to connect one →
AI output can be incomplete or mistaken, and market data can be delayed. Everything it produces is general information to inform your own thinking, not a substitute for a licensed adviser who knows your circumstances.
Optional usage analytics never touch this. They record which screens were opened, nothing about your holdings, and they are off unless you turn them on in Settings → Privacy & Data.
Delete your account yourself in Settings → Privacy & Data. Everything is erased immediately, permanently, with no waiting period and nothing kept back.
Not to advertisers, not to data brokers, not to "partners". Subscriptions pay for PortWorth, so you are the customer, not the product.
No broker passwords, no bank credentials. We can't lose what we never ask for.
PortWorth has no ability to trade, withdraw or transfer. It is a mirror of your wealth, not a hand on it.
Your financial life powers your insights, and nobody's models.
No. You import statements and CSV exports yourself. There is no standing connection to your accounts and no ability to trade or move money. For crypto exchanges, you can optionally connect a read-only API key, which by definition cannot trade or withdraw.
On enterprise-grade cloud infrastructure with redundancy and automated encrypted backups. Data is encrypted in transit and at rest.
Only the sections you tick when creating the link, nothing more. The link is read-only, cannot be used to log in, expires automatically (30 days maximum), and you can revoke it at any time from your Settings.
Your account downgrades and your data remains yours. You can export your records, and you can request full deletion at any time.
Please tell us first. Report it through our contact form marked "Security" and we will respond promptly. We're grateful to anyone who discloses responsibly.
Start with the free plan, look around, and hold us to every word on this page.