Security & Privacy
Read-only access
Prismfolio reads holdings.
Sign-in stays with your broker
You sign in on your broker's site or Plaid's screen. Prismfolio keeps Plaid's access token, encrypted with AES-256-GCM.
Encrypted
TLS in transit, encryption at rest.
Delete anytime
Delete your account and its cloud data from Settings.
No sale of data
Prismfolio shares data only with the processors that run the service. Your bank may show this connection as Plaid or as Vault & Compass, the company that operates Prismfolio.
Analytics
Analytics run without cookies until you accept them. Change that in your cookie preferences, and see the privacy page for the account events the servers record.
The extension reads holdings from your brokerage's own pages and network responses while you are signed in there; it never receives your brokerage login and never sends a request of its own to your brokerage. Some brokerages restrict automated tools in their terms, so this kind of connection may stop working; Plaid and manual entry do not depend on the extension.
Questions or reports about Prismfolio's security go to security@prismfolio.io.