Security · read-only · encrypted
Read-only by design. Encrypted by default.
Assely can see your accounts, never touch them. Connections are strictly read-only through regulated providers, your credentials stay with your bank, and everything we hold is encrypted in transit and at rest, with GDPR export and delete rights built in.
100%
Read-only access
0
Credentials stored
TLS
Encryption in transit
AES-256
Encryption at rest
Connection · Salt Edge · SnapTrade
You authenticate with your bank, never with us
Every connection runs through regulated data providers: Salt Edge for banks across the EEA and UK via open banking, SnapTrade for brokerages. You log in on your institution's own pages, so your credentials never pass through Assely; we receive read-only data, nothing else.
Disconnect an institution at any time and its data flow stops with it.
Your bank
Credentials stay here
Salt Edge · SnapTrade
Regulated data providers
Assely
Read-only data
One-way street: data flows in, money never moves out.
0
Write permissions
Architecture · read-only
The permission to move money doesn't exist
Assely's connections can view balances, transactions, and holdings, nothing else. Moving money, placing trades, or changing your accounts isn't a feature we switched off; it's a permission our architecture never requests and cannot exercise.
That's the difference between a policy and a design. A policy can fail. An access scope that was never granted has nothing to fail.
AES-256
At rest, every record
Encryption · transit · rest
Encrypted in motion, encrypted on disk
Data moves over TLS and is stored under AES-256 encryption: the same standards used by the institutions we connect to. There is no unencrypted copy of your financial data, in motion or at rest.
And the most sensitive data of all, your bank credentials, is never stored, because it never reaches us in the first place.
GDPR
Export & delete anytime
Privacy · GDPR
Your data stays yours
GDPR isn't a checkbox here; it's the operating assumption. Export everything Assely holds about you, or delete your account and every record with it, whenever you choose.
Deletion means deletion: your connections, your history, and your personal data are removed, not just your login.
One precise picture. Yours is waiting.
Connect your accounts in minutes and replace the spreadsheet.