AssetView Security

On security, our approach and tool set are constantly evolving with the ever-changing dynamics of data security.
Our unwavering focus on security and privacy underpins everything we create. While we strive to protect your information, no method of transmission over the Internet, or method of electronic storage is 100% secure. Our approach and tool set are constantly evolving to address the ever-changing dynamics of data security.
To provide aggregated views of your investment holdings and other functionality in the Services, AssetView contains your investment information (e.g. your positions, transactional dates and amounts), which may be: (a) pulled from financial institutions if you enable AssetView to do so (see information on Plaid in the Select Partner Data section below); or (b) provided from materials or information you upload or enter into the Service. This data is collectively referred to as “Personal Investment Data.” AssetView stores your Personal Investment Data locally on your computer and backups are stored in AssetView’s Cloud. Personal Investment Data is encrypted during transport and at rest.
AssetView may collect data including but not limited to your name, device session identifier, IP address clicks, actions (e.g. launching the application, pages viewed), and properties (e.g. type, version, language for your operating system). The portion of this data that makes it possible to identify you directly is referred to as Personal Data (“PD”). Personal Data stored locally or in AssetView’s Cloud is encrypted during transport and at rest.
Yes. As an installed application, AssetView stores your Personal Investment Data in the application. AssetView provides a facility within the application to delete a portfolio. When you delete your portfolio, backups of the portfolio in Assetview’s cloud are also deleted. If you use multiple computers, you must delete your portfolio on each computer.
No. AssetView uses Clerk for authentication. Your information is communicated directly with Clerk. We do not have access to your authentication methods (e.g. password, Oauth, secure key). We allow you to log in to AssetView based on Clerk’s authentication methods. Please store your credentials carefully. Without your credentials, your Personal Investment Data is inaccessible.
Yes. AssetView is configured with Clerk to enforce two-factor authentication.
After you create your AssetView account which requires authentication through Clerk, you set your Passphrase, a set of characters you designate that is required to open your portfolios. As an emergency recovery method for you if you lose your credentials, AssetView automatically generates and provides to you a mnemonic (i.e. a series of random words). Please store your credentials securely and store your mnemonic in a secure location. Your Personal Investment Data is protected by encryption and is therefore inaccessible without either your credentials or your mnemonic.
AssetView uses Plaid to connect to your financial institutions. Your financial institution credentials are communicated directly with Plaid. We never see or have your financial institution credentials. AssetView only has access to data at your financial institutions that you authorize Plaid to use.
AssetView uses Stripe for payment processing of your subscription to AssetView. Your payment information is collected directly by Stripe. We never see or have your payment method information. We store a token from Stripe that enables payment processing of your subscription to AssetView.