Security
What a read-only brokerage connection is
What Sentinel can see, what it cannot do, and where your password goes.
To measure your risk, Sentinel needs to know what you hold. The easiest way to tell it is to connect your brokerage account so positions arrive on their own. The word that matters in that sentence is "read-only".
Who connects
Sentinel does not talk to your broker directly. It uses a regulated aggregator: Tink in the EU and UK, which operates under the European open-banking rules known as PSD2, and SnapTrade in the US and Canada. When you connect, you sign in on the aggregator's own page, or your broker's, not on ours. Your brokerage password is entered there and stays there: it does not pass through Sentinel, so Sentinel has no copy to store or leak.
What Sentinel can see
- The positions in the account: which instruments, how many units.
- Current values and, where the broker provides it, what you paid.
- Cash balances, so the portfolio total is right.
What Sentinel cannot do
- Buy, sell or place any order.
- Move money in or out.
- Change anything in the account.
The connection is a window, not a door. You can revoke it at any time from the app, and from the aggregator's side too.
If you would rather not connect
You do not have to. Every plan lets you add holdings by hand, and the risk numbers are the same either way. Connecting saves typing and keeps the numbers current; it is a convenience, not a requirement. Whatever you choose, holdings are encrypted at rest and in transit once they are with us, and you can export or delete them whenever you like.
