Security & Trust

Built like it's guarding our own money.

Because it is. PortWorth was built by its founder to manage his own family's wealth first — the security decisions were made for our money before they were made for yours.

The four principles

Security you can actually verify.

No vague promises. These are the four commitments every part of PortWorth is built around — and you can check each one yourself from your first session.

Encrypted, Everywhere

Your data is encrypted in transit with the same TLS technology your bank uses, and encrypted at rest on enterprise-grade cloud infrastructure. Sensitive credentials you store with us receive an additional layer of encryption of their own.

No Broker Passwords. Ever.

We never ask for your broker or bank login — not at signup, not ever. You import statements and CSV exports yourself. There is no standing connection to your accounts, which means PortWorth can't trade, transfer, or touch your money. Tracking only, by design.

Sign-In, Layered

Passkeys (Face ID, Touch ID, Windows Hello), authenticator-app two-factor codes that work once and only once, Google and Apple sign-in, and sessions that expire automatically. Signing out revokes access immediately — everywhere.

Your Data Is Yours

We're funded by subscriptions, not by your data. Nothing is sold, rented, or shared with advertisers or data brokers — and if you leave, your data can be deleted on request. Full stop.

Defence in depth

What stands between your data and everything else.

Layer 01

Access control on every request

Every single request to your data is authenticated and role-checked — there are no "trusted" paths. You see your portfolio and nothing else; nobody else sees yours.

Layer 02

Sharing that can't outlive its welcome

Share links for your accountant or adviser are read-only, scoped to only the sections you choose, expire automatically (30 days at most), and can be revoked by you at any moment.

Layer 03

Backups and monitoring, around the clock

Automated encrypted backups run nightly, an independent error-monitoring service watches the platform continuously, and every change to your portfolio is recorded in an audit trail you can review yourself.

AI, with boundaries

Intelligence that works for you — and only you.

PortWorth's AI features analyse your portfolio to generate your own insights, alerts and reports. Your data is never used to train AI models, and the AI operates behind strict guardrails: it provides general information only and is expressly prevented from giving personal financial advice. That boundary is enforced at the platform level, not left to chance.

The short list

What we never do.

Never sell your data

Not to advertisers, not to data brokers, not to "partners". Subscriptions pay for PortWorth — you are the customer, not the product.

Never hold your logins

No broker passwords, no bank credentials. We can't lose what we never ask for.

Never touch your money

PortWorth has no ability to trade, withdraw or transfer. It is a mirror of your wealth, not a hand on it.

Never train AI on you

Your financial life powers your insights — and nobody's models.

Common questions

Security, answered plainly.

Can PortWorth access my brokerage or bank account?

No. You import statements and CSV exports yourself — there is no standing connection to your accounts and no ability to trade or move money. For crypto exchanges, you can optionally connect a read-only API key, which by definition cannot trade or withdraw.

Where is my data stored?

On enterprise-grade cloud infrastructure with redundancy and automated encrypted backups. Data is encrypted in transit and at rest.

What exactly does my accountant see when I share?

Only the sections you tick when creating the link — nothing more. The link is read-only, cannot be used to log in, expires automatically (30 days maximum), and you can revoke it at any time from your Settings.

What happens to my data if I cancel?

Your account downgrades and your data remains yours. You can export your records, and you can request full deletion at any time.

I think I've found a security issue — who do I tell?

Please tell us first. Report it through our contact form marked "Security" and we will respond promptly. We're grateful to anyone who discloses responsibly.

Ready when you are

Trust is earned in the details.

Start with the free plan, look around, and hold us to every word on this page.