Trust & Security
Last Updated: August 2026
Security First
Financial information deserves exceptional protection.
Security is designed into Oranro from the beginning rather than added later.
Our objective is simple:
Protect your data, minimize risk, and earn your trust every day.
Our Security Principles
We design Oranro around several core principles.
Least privilege access
Secure-by-default architecture
Encryption wherever practical
No unnecessary data collection
Transparent handling of third-party providers
Continuous improvement
Authentication
User authentication is securely managed through secure Authentication.
Supported capabilities include:
Email verification
Secure password hashing
Multi-factor authentication (TOTP)
Authenticator app support
Passkey support (where available)
Session management
Secure password reset
Passwords are never stored in plain text.
Encryption
Data transmitted between your device and Oranro is encrypted using modern Transport Layer Security (TLS). Where supported by our infrastructure providers, data stored within our systems is encrypted at rest.
Financial Account Connections
Oranro never asks for your online banking username or password. Remember all connection of account are via most trusted companies (i.e. Plaid, SnapTrade) in the industry that offers highest security already. You may always use the manual option if you do not wish to connect. When you choose to connect financial accounts, authentication occurs directly through trusted providers.
Plaid
Plaid securely connects supported financial institutions. Plaid manages the authentication flow between you and your bank. Oranro only receives the financial information that you authorize Plaid to share. Plaid provide security details on https://plaid.com/trust-safety/
Examples include:
Account balances
Transactions
Merchant information
Categories
Account types
You may disconnect or reconnect your financial accounts at any time.
SnapTrade
Brokerage connectivity is provided through SnapTrade. SnapTrade is SOC 2 Type II certified and follows strict procedures and processes to exceed industry standard practices making sure data is always secured and encrypted at rest and in transit. The data is only shared with authorized apps and can be revoked at anytime within the app. SnapTrade provide security details on https://snaptrade.com/security
Broker authentication occurs directly with SnapTrade and your brokerage.
Oranro never receives or stores:
Brokerage passwords
Brokerage login credentials
Multi-factor authentication codes for your brokerage
Oranro receives only the portfolio information that you authorize SnapTrade to share.
Examples include:
Holdings
Transactions
Positions
Cost basis
Portfolio balances
You may disconnect or reconnect your financial accounts at any time.
Research Data
Research content may include data sourced from:
SEC EDGAR filings
Public company disclosures
Licensed market data providers
Company earnings releases
Although we monitor data quality, public information may occasionally be:
corrected
amended
restated
delayed
Research should always be considered informational rather than authoritative.
Access Controls
Internal access follows the principle of least privilege.
Only authorized systems and personnel may access production infrastructure when necessary.
Access is reviewed periodically.
Audit Logging
Important platform events may be logged for security and operational purposes.
Examples include:
Sign in attempts
Authentication changes
Password resets
Multi-factor enrollment
API failures
Administrative actions
Audit logs help investigate suspicious activity and improve platform reliability.
Infrastructure
Oranro relies on established cloud infrastructure providers. These providers maintain physical, network, and infrastructure security for the environments in which Oranro operates.
AI Security
AI features are designed to assist research. AI is never permitted to:
execute trades
move money
access brokerage credentials
modify financial accounts
make decisions on behalf of users
AI-generated content should always be reviewed before relying upon it.
Responsible Disclosure
If you discover a potential security issue, we encourage responsible disclosure. Please report security concerns to:
Please do not publicly disclose security issues until we have had an opportunity to investigate.
Incident Response
If we become aware of a security incident affecting customer information, we will:
investigate promptly
contain the issue
notify affected users when required
work with our providers to remediate the issue
continue monitoring until resolved
Your Role
Security is a shared responsibility.
We recommend:
Enable multi-factor authentication.
Use a unique password.
Keep your email account secure.
Review connected financial institutions periodically.
Report suspicious activity immediately.
What Oranro Will Never Do
We will never:
Ask for your online banking password.
Ask for your brokerage password.
Ask for your authentication codes for your bank over email.
Sell your personal financial information.
Execute trades on your behalf based on your connected brokerage accounts.
Move money between your accounts.
Building Trust
Security is not a feature.
It is an ongoing commitment.
As Oranro grows, our security practices will continue to evolve alongside the platform and the needs of our users.
Contact
Questions regarding security?
Please contact: