Protecting your privacy from the start
How Noryo protects your data and the good habits to adopt from your very first steps.
Your finances are part of your privacy. Noryo is designed to protect them deeply, and you can strengthen that protection with a few simple steps right from the start. Here is what Noryo does for you, and what you can do on top.
A read only bank connection
The connection to your accounts goes through open banking, governed by PSD2 regulation. In practice, you confirm access on your own bank's interface, and your banking credentials are never entered in Noryo. The access granted is strictly read only: Noryo can display your transactions, but can never initiate a payment or a transfer.
You give explicit consent to the connection, and you can withdraw it whenever you want. For security reasons, this consent expires regularly and is renewed by reconnecting the bank.
Encryption and hosting in Europe
Your data is encrypted and hosted in Europe. It is never resold. The vault where you store your documents is also encrypted, so your supporting documents stay confidential.
What these principles protect
- Encryption
- Your information is made unreadable to anyone who is not allowed to access it.
- Hosting in Europe
- Your data is stored within the European regulatory framework.
- Read only
- No financial transaction can be triggered from Noryo.
Securing your account
Beyond what Noryo puts in place, a few settings clearly strengthen your account security. They are in the security settings of the app.
Enable two factor authentication
Add a two step verification, and keep your backup codes in a safe place.
Write down your recovery key
It is shown only once: keep it carefully outside the app.
Enable biometrics on iOS
Face ID or Touch ID protects opening the app on your iPhone or iPad.
Monitor your sessions
You can review your connected devices and disconnect the others if in doubt.
Noryo supports passkeys, a modern passwordless sign in method, simpler and more resistant to phishing.
You stay in control of your data
At any time, you can exercise your rights: export all of your data in a reusable format, or permanently delete your account. Deletion requires a confirmation code sent by email, to prevent any mistake.
- Export of all your data in compliance with the GDPR
- Permanent account deletion, with confirmation by email
- Email alerts in case of an unusual sign in
- Fine grained control of the assistant's permissions by area
Your recovery key and your backup codes are what guarantees you can regain access to your account. Do not share them with anyone and keep them outside the app.
The guide to set up your account well.