1. Verified account access
Protected product routes validate the signed-in session before returning portfolio information. Product access and subscription entitlement are enforced at the application boundary.
Security
Three layers of protection for your portfolio data.
Financial Portfolio Manager combines verified account access, owner-scoped database isolation, and application-level encryption for sensitive portfolio details.
Comprehensive protection
Security built through the complete data path.
Each layer serves a different purpose: confirming the account, enforcing ownership at the database boundary, and protecting sensitive values before storage.
2. Owner-scoped data isolation
PostgreSQL Row Level Security prevents one signed-in customer from reading or changing another customer’s portfolio rows, including direct authenticated database requests.
3. Encrypted sensitive details
Sensitive portfolio details are encrypted with AES-256-GCM before database storage. Plaintext values are prohibited in the retired sensitive storage columns.
Protected keys
A separate data key for every account.
Every account receives its own random 256-bit data-encryption key. The ordinary database stores only an encrypted version of that key under a separately managed, versioned server-side wrapping key.
Sensitive fields
Names, holding tickers, quantities, allocations, cash amounts, and user-entered investment details are protected by application-level encryption.
Server-side key protection
Plaintext user data keys and the server-side wrapping keyring are not sent to the browser or desktop renderer.
Safe key rotation
Versioned wrapping keys allow the protection layer to rotate while existing encrypted data remains recoverable through controlled server processes.
Your privacy
Your portfolio is isolated from other customers.
Through normal product access, only your signed-in account can view and manage your portfolio. SWB Technologies does not sell customer data or use customer financial content for targeted advertising.
The application server decrypts sensitive fields only when needed to provide requested product screens, statistics, billing lifecycle workflows, and controlled security maintenance. Privileged operational access is tightly limited, and sensitive portfolio content is excluded from application logs, support tickets, and release evidence.
No online system can guarantee absolute security. SWB Technologies maintains technical and operational safeguards designed to protect customer information and treats suspected exposure as the highest severity operational event.