Ezana is built so that your credentials, your account data, and your money are each protected by a different safeguard. This article explains what those safeguards are and what you can do yourself to keep your account secure.
How it works
- Data in transit: everything between your browser and Ezana travels over encrypted HTTPS connections.
- Your records: access rules scope your watchlists, portfolios, and settings to your own account, so other users cannot read them.
- Brokerage credentials: connections run through Plaid and SnapTrade (SnapTrade is SOC 2 Type II certified). You sign in to your broker inside their secure window, and Ezana never sees or stores your brokerage login.
- Connection tokens: the access tokens those providers issue are encrypted with AES-256 before they are stored.
- Payments: card details are handled by Stripe. Ezana only sees the card brand, last four digits, and expiry.
- Funds: an Ezana brokerage account is held with Alpaca Securities and is SIPC insured up to $500,000.
Steps you can take
- Turn on two-factor authentication in Settings, then Password.
- Keep Login alerts on in the same panel so you get an email when a new device signs in.
- Use a unique password of at least 8 characters with upper and lower case letters and a number.
- Review which apps have access at each broker you have connected, and revoke any you no longer use.
Your data rights
In Settings, then Privacy & data, you can submit a request to view or receive a copy of your data, correct it, restrict processing, receive a portable copy, delete it, or raise another privacy request. You can follow the status of each request on the same panel. How we collect and share personal data is described in our Privacy Policy.
Troubleshooting
- Want to remove a broker connection? A disconnect button is not currently available in the app. Revoke access from your broker’s connected-apps page, or email contact@ezana.world.
- Suspect unauthorized access? Reset your password, enable 2FA, and email contact@ezana.world.
- Got a login alert you don’t recognize? Change your password right away.
Next in Account & Security: Resetting Your Password and Personal API Access and Integrations.
Related articles
- Enabling Two-Factor Authentication
- Managing External Brokerage Connections
- Exporting Your Data
- Privacy Policy
FAQ
Q: Does Ezana store my brokerage password?
A: No. You sign in with your broker through Plaid or SnapTrade, and Ezana only receives an encrypted access token.
Q: Can I get a copy of my data?
A: Yes. Submit a “View or receive a copy” or “Data portability” request from Settings, then Privacy & data.