How Noryo protects your data
Encryption, hosting in Europe, read-only access, and full control: the principles that protect your data.
Your financial data is among the most sensitive there is. Noryo was built around a simple principle: show you your money without ever being able to touch it, and keep your information protected from end to end. Here is exactly how we do it.
The core principles
Our protection commitments
- Read-only access to your banks
- Noryo reads your transactions to display and analyse them, but can never trigger a payment, a transfer or a change on your accounts. No action on your money is technically possible.
- Encryption of your data
- Your information is encrypted, both in transit and at rest. Even when stored, it stays unreadable without the appropriate keys.
- Hosted in Europe
- Your data is hosted on servers located in Europe and subject to the European data protection framework.
- No reselling
- Your data is never sold or handed over to third parties for advertising purposes. You remain the sole owner of your information.
A framed bank connection
The connection to your bank relies on open banking, the European framework (PSD2 regulation) that lets a service read your accounts with your explicit consent. Everything happens securely and transparently.
- You approve the connection directly in your bank's interface, never inside Noryo.
- Your banking credentials are never entered or stored in the app.
- Access is strictly read-only: reading your transactions, nothing else.
- Your consent is explicit, time-limited and revocable at any time.
For your security, the access authorisation has a limited lifetime imposed by regulation. When it reaches its end, you simply reconnect the bank in one tap to renew your consent.
What Noryo can do, and what it cannot
| Action | Noryo |
|---|---|
| Display your transactions | |
| Analyse your spending | |
| Categorise your transactions | |
| Make a transfer | — |
| Initiate a payment | — |
| Change your bank accounts | — |
You stay in control
Protecting your data also comes through the tools you hold yourself. At any time, you can exercise your rights and adjust what Noryo sees.
- Revoke a bank connection: cut off access to a bank whenever you like.
- Export your data: retrieve all of your information under the GDPR.
- Delete your account: a permanent deletion, confirmed by a code received by email.
- Set the assistant's permissions: decide, domain by domain, what Nory can read or change.
Read-only protection active on 100% of bank connectionsOperational
No payment operation can be triggered from Noryo, by design.
Your questions about data protection
Frequently asked questions
Can Noryo spend my money or make a transfer?
No, never. Access to your banks is strictly read-only. No payment or transfer function exists in the app.
Are my banking credentials stored?
No. You authenticate directly with your bank. Noryo neither sees nor keeps your credentials.
Is my data resold?
No. Your data is never sold or shared for advertising purposes. It is used only to provide you with the service.
Where is my data stored?
On servers hosted in Europe, subject to the European framework for personal data protection.
Turn on two-factor authentication and, on iPhone, Face ID or Touch ID unlock. These are the most effective protections you can put in place yourself.
Protecting your data is a shared responsibility: we secure the infrastructure, you strengthen access to your account. The next two pages show you how to go further.
Two-factor authentication, passkeys, active sessions and login alerts.