Security and access

Access to your portfolio

Financial Portfolio holds personal financial records, ownership information and supporting documents. Access depends on your signed-in account, your portfolio membership and the permissions assigned to your role.

The app checks those permissions before providing portfolio records. A person named as an owner, beneficiary or professional in a record does not automatically receive access to the app. Financial ownership and permission to view a portfolio are separate.

Owners, editors and viewers

Portfolio roles determine what someone can see and change. Choose access according to the task that person needs to carry out.

• Owners can maintain records, manage viewers and the sections they can access, and manage the portfolio subscription.
• Editors can change records and manage documents. They cannot manage viewer access or the subscription.
• Viewers have read-only access to the sections shared with them. They cannot edit portfolio records or upload, change or delete documents.

Staff access is managed separately from these portfolio roles. For practical guidance on sharing, read family and professional access.

What a viewer can see

An owner selects the sections a viewer may access. Sections that have not been shared, hidden records and entity tax identifiers are excluded from the viewer’s records. Reports available to a viewer also follow their section permissions.

Review the contents of records and notes before sharing them. A field can contain information that is more sensitive than its label suggests. Check the recipient and selected sections, and review access when family or professional relationships change.

Documents need separate sharing

Portfolio membership alone does not give a viewer access to every file. A viewer needs access to the relevant section and record, and the document must also be explicitly shared with them.

Review each file before sharing it, including any information about other people. Uploaded documents may include personal identifiers or details that are unnecessary for the recipient’s task.

Keep an independent copy of important documents. Portfolio restore points do not guarantee recovery of deleted file contents. The documents and storage help article explains supported files and upload limits.

Activity records and restoring information

Security-relevant actions are recorded in a tamper-evident audit trail to support accountability. These activity records are separate from the financial records and files you maintain in your portfolio.

Restoring an earlier portfolio version can also reinstate earlier viewer settings. After a restore, check the people with access and the sections they can see before continuing to share information.

Your account and shared information

Use your own account and keep access to it private. Before granting access, check the recipient’s email address and confirm which records and documents they need.

• Review shared sections and files regularly, especially after a change in circumstances.
• Keep bank passwords, PINs and recovery phrases out of portfolio records, notes and uploaded documents.
• Review exported reports and downloaded files before sending them to someone else.

Sharing information does not grant legal authority to act on your behalf. Financial Portfolio organises records; the current app does not move money, execute trades or automatically import bank transactions.

Privacy and service details

The Privacy Policy describes personal-information handling, and the Terms of Use set out the conditions for using the service. Read these alongside the access information on this page.

If you need a specific assurance about where information is stored, retention, deletion, backups or security certification, ask the team for the current verified details before relying on that assurance. This page explains the documented access controls and is not a security certification or a guarantee that every risk is removed.

Raise a privacy or access concern

If something about account access or information sharing does not look right, contact the Financial Portfolio team or email admin@financialportfolio.com.au.

Describe what happened, when you noticed it and the page or feature involved. Do not include passwords, account numbers, recovery phrases or private financial documents in your initial message. The team can clarify what information is needed next.