{"id":413,"date":"2026-09-07T05:42:37","date_gmt":"2026-09-07T05:42:37","guid":{"rendered":"https:\/\/www.orama.ai\/?page_id=413"},"modified":"2026-10-14T14:05:02","modified_gmt":"2026-10-14T14:05:02","slug":"security","status":"publish","type":"page","link":"https:\/\/www.orama.ai\/en\/features\/security\/","title":{"rendered":"Security and regulatory compliance at Orama"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n <\/span>\n
\n
\n
<\/canvas><\/div>\n

Security and regulatory
compliance at Orama<\/span><\/h1>\n

Your financial data is the most sensitive thing you hold. At Orama we protect it with encryption and with PSD2 and GDPR compliance. Orama doesn't connect to your banks directly: bank aggregators regulated by the Bank of Spain and ISO\/IEC 27001 certified do, over a read-only connection. All on servers in the European Union.<\/p>\n

\n Book a demo<\/a>\n Start your 7-day free trial<\/a>\n <\/div>\n

30-min demo \u00b7 7-day free trial, no card required<\/p>

\n \n <\/g><\/g><\/g><\/svg><\/span>\n on Capterra \u00b7 300+\u00a0companies\u00a0use\u00a0Orama<\/span> <\/a>\n <\/div>\n <\/div>\n
\n
\n
Read-only PSD2 connection<\/span><\/div>\n
<\/svg><\/span><\/div>\n \n <\/marker><\/defs>\n \n \n \n <\/svg>\n
Bank A<\/span>Bank B<\/span>Bank C<\/span><\/div>\n
\ud83d\udd12<\/span>Encrypted data<\/b><\/span><\/div>\n
\u2713<\/span>Permissions per user<\/b><\/span><\/div>\n<\/div><\/div><\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n Feature<\/span>

How Orama protects your data<\/h2> <\/div>\n
\n
\n
\n

Standards and regulation<\/h3>\n
<\/svg>PSD2: bank aggregation through regulated providers and a read-only connection.<\/span><\/div>\n
<\/svg>GDPR: data processed in line with European regulation.<\/span><\/div>\n <\/div>\n
\n
\"Seals<\/div> <\/div>\n <\/article>\n
\n
\n

Infrastructure and data protection<\/h3>\n

Servers in the European Union (Belgium and Germany), HTTPS-encrypted connections and encrypted disks. On top of that, Orama encrypts the most sensitive data field by field (bank authorisations, IBANs, balances and limits) and keeps the keys separately. The connection to your banks is read-only: Orama can never move your money.<\/p> <\/div>\n

\n
\n
Data protection<\/span><\/div>\n
<\/svg><\/span><\/div>\n \n <\/marker><\/defs>\n \n \n \n <\/svg>\n
Bank A<\/span>Bank B<\/span>Bank C<\/span><\/div>\n
\ud83d\udd12<\/span>Encrypted data<\/b><\/span><\/div>\n
\u2713<\/span>Read-only: never moves your money<\/b><\/span><\/div>\n<\/div> <\/div>\n <\/article>\n <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n

Frequently asked questions<\/h2>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n Can Orama move my money?+<\/span><\/summary>\n
No. The PSD2 bank connection is read-only: Orama reads balances and transactions to analyse them, but cannot initiate payments.<\/div>\n <\/details>\n
\n Where is my data stored?+<\/span><\/summary>\n
On servers in the European Union (Belgium and Germany), with top-tier cloud providers and GDPR compliance. Your data is encrypted, and the most sensitive fields, such as IBANs, balances and bank authorisations, are also encrypted one by one.<\/div>\n <\/details>\n
\n How secure is the connection to my bank?+<\/span><\/summary>\n
Orama doesn't connect to your banks directly: bank aggregators regulated by the Bank of Spain and ISO\/IEC 27001 certified by AENOR do, over a read-only connection, so Orama can never move your money. Your data is also stored encrypted.<\/div>\n <\/details>\n
\n Does Orama store my bank credentials?+<\/span><\/summary>\n
No. Orama never sees or stores your bank credentials: you enter them on the bank aggregator's screen.<\/div>\n <\/details>\n
\n Is my data used to train AI?+<\/span><\/summary>\n
No. Orama's AI runs on Anthropic's API, which under its commercial terms does not use that data to train its models. And if you connect your own AI through the MCP, it only sees what your user can see, with a permission that is off by default.<\/div>\n <\/details>\n
\n Can I log out of a device I've lost?+<\/span><\/summary>\n
Yes. In User profile \u203a My devices you see every device you've signed in from and can end the session on any of them instantly.<\/div>\n <\/details>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

All the security details, in Orama Academy \u2192<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n <\/span>\n
\n
\n \n \n \n \n \n \n \n <\/g>\n <\/g>\n <\/svg>\n \n <\/linearGradient><\/defs>\n \n \n \n <\/svg>\n <\/div>\n <\/div>\n
\n

Orama Academy<\/h3>

Learn how to get the most out of Orama. Guides, videos and training, step by step.<\/p> Go to Orama Academy <\/svg><\/a> <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n <\/span>\n

Start controlling your cash flow this week<\/h2>

7 days free. No card. No commitment. And if you'd like us to walk you through it, we'll book a 30-minute demo.<\/p>

\n Book a demo <\/svg><\/a> Start your 7-day free trial<\/a> <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Seguridad y cumplimientonormativo en Orama Tus datos financieros son lo m\u00e1s sensible que tienes. En Orama los protegemos con cifrado de nivel bancario, certificaci\u00f3n ISO 27001 y cumplimiento de PSD2 y RGPD. Seguridad pensada para pasar la due diligence del CFO m\u00e1s exigente. Demo de 30 min \u00b7 Te respondemos en menos de 24 h […]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":397,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"content-type":"","_joinchat":[],"footnotes":""},"class_list":["post-413","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/pages\/413","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/comments?post=413"}],"version-history":[{"count":1,"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/pages\/413\/revisions"}],"predecessor-version":[{"id":928,"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/pages\/413\/revisions\/928"}],"up":[{"embeddable":true,"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/pages\/397"}],"wp:attachment":[{"href":"https:\/\/www.orama.ai\/en\/wp-json\/wp\/v2\/media?parent=413"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}