Trust & security

Analyze Portfolio never connects to your brokerage account. You enter holdings yourself or paste a CSV export — there are no account credentials to hand over, no trading permissions, and no way for this app (or anyone who compromised it) to move your money. It cannot place trades, withdraw funds, or touch your brokerage in any way.

We don't hold assets, execute orders, or recommend trades. Everything on this site is information — prices from market data providers and figures from public SEC filings. It is never a recommendation to buy or sell anything. For decisions, verify against the source filing and consult a licensed advisor.

The research layer is built on SEC EDGAR, the filing system the SEC runs — public-domain data, extracted deterministically from each company's XBRL statements. Every financial figure links back to the filing it came from, so you never have to take our word for it. Where an answer is AI-assisted, it cites the filing excerpts it drew from, and a verification pass checks that each citation actually supports its claim.

New SEC filings for our deep-research companies flow in within about 15 minutes of hitting EDGAR. Fundamentals for the full 3,500+ company universe are recomputed nightly and fully re-ingested weekly. Prices come from market data providers and can be delayed — this is a research and monitoring tool, not a trading terminal, and we'd rather tell you that than pretend otherwise.

Passwords are salted and hashed with bcrypt — never stored or logged in plain text. Sessions are server-side random tokens in secure, HTTP-only cookies. All traffic is TLS-encrypted with HSTS enforced. Sign-in, registration, and password-reset endpoints are rate-limited and bot-protected. The database lives outside the web root on infrastructure we operate.

Your portfolio is yours. Export everything — account, portfolios, positions, transactions, watchlists, notes, research models — as a single JSON file from Settings at any time, and delete your account (and its data with it) whenever you want. The full details live in the privacy policy.