Looks very promising! However I'm really concerned about the security part. Entering my credentials to all my financial platforms doesn't look very secure. Also how do you handle GDPR concerns by storing users' credentials to financial platforms without using any integrations instead? How do you make sure credentials are stored securely and they won't be compromised locally or externally? I can see a huge risk if all that data gets leaked somewhere!
* Edit (reply): Since I didn't receive the reply on LinkedIn I'll share my observations here, publicly. So, you're using the platform flanks.io for accessing your users banks and other financial platforms. There's not much about this company on the internet. On their website I can see their security whitepaper, but no information about any security certification or something what could improve trust, just a plain blabla data. No 3rd party audits, nothing. Me and you don't even know how their infrastructure is really set up and how they handle the data. They state that they use only read-only access to users financial platforms. Upon entering my Revolut credentials only after I've realized I gave my pin code to the app to them and authorized a device (firefox instance) to access my Revolut account. Even if they state it's read-only, having access to my Revolut account, storing my PIN code and having their device added into my account's authorized device list isn't very secure. IF someone at flanks.io (some angry engineer) or someone outside gets access to their servers they can freely access any user's financial platforms not just in read-only format. Having authorized device and knowing the pin code allows the attacker to use your account however they want. They can even change the pin code, take the loan and transfer money to themselves. It sounds really convenient and easy, the service you provide. But giving out security to some 3rd party provider (flanks.io) and vouching for it's security (without any ISO certification or independent audit) is very brave statement. You don't even have any CISO or security personnel on your side (at least I couldn't find any). So from my POV giving out users financial platforms access so easily is a huge security risk. I wonder what will happen and how you're going to mitigate consequences of data breach, which could end up with financial platforms credentials of thousands of people on darknet. Anyone who's considering using this platform - please make sure you know what you're doing and you're ok with such a huge risk.
Hi Sebastian,
Thanks for your review and happy to address your concerns and hopefully change your mind!
To connect your account with getquin, we work with API services, some in-house developed, and others with third party providers (this depends on the country mainly). In Germany, we have mainly direct connections to the banks.
Those APIs allow us to transfer your data encrypted according to the need-to-know principle. In our case, this interface has read-only rights and can only read data, but not change it. On the encryption, the data is stored on EU servers, to add an additional safety layer and to be fully GDPR compliant.
I'm really impressed with getquin so far. It's early days, but I'm loving this solution as I delve into dividend stocks. It's been a breeze to set up, boasting a fresh interface and sleek design – making a great first impression.
Getquin is an amazing app to track one or several portfolios. The number of securities covered with real time coverage is huge.
The interface is user-friendly and new features are delivered very regularly to make the experience even better.
I will keep using this app and will follow-up closely how it expands.
Been using this for over a year now to track my portfolios and the kids ETF plan. The community is super helpful and the finance integration seamless. Also the rate at which they implement new features is absolutely insane in a positive way.
getquin is the easy solution to get data on your overall performance across different portfolios. Plus the community of investors is always providing great advice and feedback.
Excited to use Getquin more in the future, for fun conversations, feedback and insights into the world of stocks.
Linking my portfolio was super easy. It synced instantly and it gives me a pretty good insight about what is currently going on (it looks better than the UI my broker is using now). Im in the game for long term investing so it´s nice to see so many like minded people on the platform. On a sidenote, i haven´t seen any toxic behaviour, wich is very pleasant.
Currently testing the app even more, might buy the premium version.
Best of luck from germany <3
