The Wealth Pool (TWP) does not store your bank and brokerage login credentials. We have partnered with ENVESTNET | Yodlee to safely manage these institutional connections. After the one-time setup (for each institution), your credentials are only stored at Yodlee, not in TWP’s database.
TWP uses bank-grade, multi-layered security to protect your information and data:
We use 128-bit secure socket layer technology (SSL) and secure server communications in the form of HTTPS.
When you establish connection to your financial institution(s), your data and information is encrypted in transit (between your computer and TWP) and at rest (on the application servers at TWP) through SHA-256 encryption.
When you provide us with your bank credentials, you are only authorizing read-only access for your account. This means that TWP cannot be used to transfer or withdraw money.
If you are inactive for an extended period of time we automatically log you out to prevent unauthorized account access.
At minimum, we require passwords to be at least 8 characters long with at least one uppercase letter, lowercase letter, number, and special character.