“Can foliologic. read my portfolio?”
We cannot decrypt your encrypted portfolio.
When you connect a bank or a crypto exchange, the access and holdings data the sync needs are processed on our servers. The holdings data is then stored encrypted in your portfolio, the access data on our servers for later syncs.
How it works
Your portfolio is encrypted in your browser with AES-256-GCM, under a random key created on your device. Your password unlocks a wrapped copy of that key, your recovery code a second one; our servers hold only these wrapped copies and data we cannot decrypt. For syncing we keep, for a bank, the login of your account at finAPI — not your online-banking login — and, for an exchange, your API key and secret, encrypted with a server key. We delete an exchange’s key when you disconnect it, the finAPI login when you disconnect your last bank, and both when you delete your account.
DKB
ING
Comdirect
Consorsbank
Deutsche Bank / maxblue
Flatex
Sparkasse
Volksbank / Raiffeisenbank
Baader Bank
Pax-Bank
Trade Republic
Scalable Capital
Smartbroker+
Traders Place
finanzen.net ZERO
S Broker
Trading 212
Interactive Brokers
tradegate.direct
Bitpanda
N26