FAQ: security and revoking bank access

Connecting your accounts relies on open banking, a framework governed by the European PSD2 regulation. Here are the answers to the most frequent questions about its security and how to stay in control.

Can Noryo move money in my accounts?

No, never. Access is strictly <strong>read-only</strong>: Noryo views your transactions and balances to present them to you, but it cannot make any payment, any transfer, or any action on your accounts.

Does Noryo know my banking credentials?

No. Your banking credentials are never entered in Noryo. When you connect, you approve access directly on your bank's official interface. Noryo sees neither your password nor your codes.

What is consent and how do I grant it?

Consent is the explicit authorization you give your bank to share your data in read-only mode with Noryo. You grant it when connecting the bank, by confirming access on its interface.

Why does my access expire regularly?

For security, this consent has a limited validity period imposed by the regulation. When it expires, updates stop and you simply reconnect the bank to renew the authorization. It's a protection, not a malfunction.

How do I revoke access to a bank?

You stay in control at all times. You can disconnect a bank from your list of accounts in Noryo. Revocation can also be done from your bank's space, where you manage the access granted to third-party services.

1. Disconnect the bank from your accounts in the app.
2. Reading of this account stops immediately.
3. You can reconnect later if you wish.

Is my data resold?

No. Your data isn't resold. It's encrypted and hosted in Europe, and used solely to provide you with Noryo's features. You also have your rights to access, export, and delete it.

What happens if I delete my account?

Account deletion is permanent and erases your data. The access granted to your banks ceases. You can also request a full export of your data before any deletion.

Understanding update delays