Security

Clareos never takes custody of client funds or securities. All client assets are held by qualified third-party custodians that are SEC-registered broker-dealers and members of FINRA and SIPC. SIPC protection covers up to $500,000 per account, including $250,000 for cash claims. SIPC does not protect against market losses. For full details, see our disclosures.

Account aggregation is handled through Plaid, an established financial-data provider trusted by major U.S. banks and brokerages. Clareos receives read-only access to balances, positions, and transactions. We never store your bank or brokerage credentials, and we do not have the ability to move money out of connected accounts through Plaid.

Every trade, rebalance, or transfer is staged for explicit approval before it runs. The advisor surfaces the proposed action with full reasoning and the expected outcome; nothing executes until you say yes. You can revoke approvals at any time.

All data is encrypted at rest using AES-256 and in transit over TLS 1.2 or higher. Account credentials and access tokens are stored using hardware-backed key management. Backups are encrypted with the same standards as primary storage.

Sign-in supports strong-password authentication and SSO. Sessions expire automatically and are bound to the device they were issued to. We recommend using a unique, long passphrase and a password manager.

Clareos Financial Inc. is pending registration as an investment adviser with the U.S. Securities and Exchange Commission. Upon registration, Clareos will be bound by the fiduciary standard, and all advisory output will be subject to ongoing compliance review under a designated compliance officer. See our disclosures for the full statement.

If you believe you've found a security vulnerability that affects Clareos or our clients, please email [email protected]. Please give us a reasonable opportunity to investigate and remediate before any public disclosure.