The security of open banking
How Noryo accesses your accounts securely: read-only, credentials never entered in the app, revocable consent, and the PSD2 regulatory framework.
Linking your bank accounts to an app requires trust. Noryo relies on open banking, the European framework governed by the PSD2 regulation, designed precisely so that this sharing is safe, governed, and entirely under your control. Here, without jargon, is how it protects your data and your money.
You stay in control: read-only access
This is the essential point. Noryo accesses your accounts read-only. The app can see your transactions and balances to analyse them, but it can never initiate a payment, a transfer, or any action on your money. No one, through Noryo, can move your funds.
You never enter your banking credentials in Noryo. Connection validation happens directly on your bank's interface, exactly as when you log in there as usual.
Consent, given and taken back at any time
Nothing connects without your explicit agreement. When linking a bank, you validate a consent that specifies which accounts are shared. This consent belongs to you.
What you control
- Explicit consent
- You choose which accounts to share, and you validate it on your bank's interface.
- Revocation
- You can withdraw your agreement at any time, which cuts off Noryo's access to your accounts.
- Automatic expiry
- For your security, consent has a limited duration. After that period, you need to renew it by reconnecting the bank.
Regular expiry is a security measure required by the regulation. It ensures that no access stays active indefinitely without a fresh confirmation from you.
The protection of your data
Beyond the connection itself, your data is protected end to end.
- Your data is encrypted and hosted in Europe.
- It is never resold or transferred to third parties for advertising purposes.
- You can export or delete all of your data at any time (GDPR rights).
Strengthening the security of your Noryo account
The bank connection is secure by default. You can add extra protections on your own Noryo account.
- Turn on two-factor authentication (2FA) and keep your backup codes.
- On iPhone and iPad, enable unlocking with Face ID or Touch ID.
- Review your active sessions and log out devices you do not recognise.
Read-only accessOperational
Guaranteed by the open banking framework: no action on your funds is possible through Noryo.
Your security questions
Can Noryo spend or transfer my money?
No, never. Access is strictly read-only, no action on your funds is technically possible from the app.
What happens if I revoke my consent?
Noryo immediately loses access to the accounts concerned. Your data already present remains yours and you can delete it.
Are my banking credentials stored?
No. You never enter them in Noryo: authentication happens on your bank's interface.
In short, you decide what you share, you can take it all back whenever you want, and Noryo can only watch, never act. To go further on how consent works, see the dedicated article.
How your authorisation works and renews.