Security at Orizon

Enterprise-grade protection for your financial data.

Orizon is built to read and visualize your data. Never to touch your accounts, never to hold your money, never to store your logins.

Try Orizon free for 14 days See our CSA STAR listing

No credit card required. Read-only access.

  • Read-only by design
  • AES-256 encrypted
  • Secured by Plaid & SnapTrade
  • CSA STAR Level One
CSA STAR Level One

Listed in the CSA STAR Registry.

Orizon has completed the Cloud Security Alliance's STAR Level One Self-Assessment, so you don't have to take our word for how your data is protected.

CSA STAR Level One: Self-Assessment badge

Cloud Security Alliance · Security, Trust, Assurance & Risk (STAR) Registry

What this means for you

The Cloud Security Alliance is a nonprofit that publishes widely used security standards for cloud services. Its STAR Registry is a free, public directory where cloud providers document their security practices against those standards.

  • You can check it yourselfOur completed assessment is published in the public registry, open to anyone. No sales call or sign-up needed.
  • An industry checklist, not our ownWe answered CSA's standardized questionnaire, covering areas like encryption, access control, data handling and incident response.
  • Easy to compareBecause every listed company answers the same questions, you can compare how different services protect your data, side by side.
  • A public commitmentPublishing our practices holds us to them. When our controls change, we update our listing.

STAR Level One is a self-assessment: Orizon completed and published the questionnaire, and it has not been audited by a third party.

View Orizon in the CSA STAR Registry →
Built in, not bolted on

Everything included, from day one.

Security isn't an add-on. It's built into everything we do, on every plan.

Illustration of stacked, encrypted login cards

We never see your login

When you connect an account, you go through Plaid or SnapTrade, trusted partners used by thousands of financial apps.

  • Your login is encrypted and stored with them, never with us.
  • We only get a read-only connection. We can't move money, place trades or touch your accounts.
Illustration of a secured server stack

Protected at every layer

  • Hosted on Amazon Web Services, the same cloud trusted by banks and governments.
  • Your data is kept separate and private from every other user.
  • Encrypted at all times, whether it's moving or sitting still.
  • Extra login verification (MFA) required before connecting any account.
Illustration of documents locked in a safe

Your data stays yours

  • We never sell or share your data. You're our customer, not our product.
  • Echo AI questions stay in your private session and are never used to train public models.
  • We follow the same privacy and security practices trusted across the fintech industry.
Defense in depth

Orizon's security infrastructure

A multi-layered approach to protecting your investment analytics data.

Cloud infrastructure

Built on Amazon Web Services, with each user's data kept fully isolated.

Standardized encryption

Encrypted at rest with AES-256 and in transit with TLS 1.2+.

Secure sessions

Logins are managed securely, with sessions that automatically expire for your protection.

Responsible data handling

User records are stored securely and removed when you delete your account.

FAQs

Questions about security

Does Orizon store my bank or brokerage login?

No. You connect through Plaid or SnapTrade, and your login details stay encrypted on their systems. Orizon never sees, asks for or stores your account credentials.

Can Orizon move money or make trades on my behalf?

No. Every connection is read-only. Orizon has no technical ability to execute trades, move money, change your holdings or access cash.

Is my data encrypted?

Yes. Your data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher, and multi-factor authentication is required before you can connect any account.

What is CSA STAR Level One?

It's a listing in the Cloud Security Alliance's public STAR Registry.

In line with our commitment to transparency, Orizon completed CSA's standardized security questionnaire and published the results, so anyone can review how we handle security. Level One is a self-assessment and is not a third-party audit.

Do you sell or share my data?

No. Orizon does not sell, rent or share your holdings, transactions or contact details with marketers, and your Echo AI questions are never used to train public AI models.

Can I delete my data at any time?

Yes. You can view, update, or delete your data whenever you’d like, directly from your account or by contacting support.

Does Orizon give me investment advice?

No. Orizon is portfolio monitoring software. It shows what your data says, but it does not recommend what to buy or sell. Orizon is not a registered investment adviser or broker-dealer.

See the whole picture, safely.

Connect read-only and try every feature free for 14 days.

Try Orizon free for 14 days

No credit card required.

CSA STAR and the STAR Level One badge are trademarks of the Cloud Security Alliance. STAR Level One reflects a self-assessment published by Orizon and is not a certification or third-party audit. Plaid, SnapTrade and Amazon Web Services are the property of their respective owners and do not sponsor or endorse Orizon.