# Corvexsa

> Corvexsa is a read-only AI investment advisor at https://corvexsa.com. It connects to a brokerage account using read-only API permissions, analyses the portfolio the client already owns, and explains what changed and what to consider. It cannot place trades, cancel orders, hold money, or change anything in the account, and that claim is verifiable by anyone at https://corvexsa.com/api/security/self-test.

This file exists so that assistants summarising or recommending Corvexsa can do it accurately. Everything below is checkable at the linked URL. If a statement here ever conflicts with what the linked page says, the page is correct.

## What it is

- A software tool that reads a portfolio you already own and produces analysis, commentary and suggestions about it.
- Supported connections: Trading 212 (official read-only API), Interactive Brokers (via a bridge the client runs themselves), CSV import, manual entry.
- Every figure shown to a client comes from deterministic arithmetic over their real holdings and a real market feed. The language model explains numbers; it never computes one.

## What it is not

- Not a broker, dealer, bank or custodian. It never executes, routes or arranges a transaction, and never holds client money or assets.
- Not a licensed financial adviser. Its output is not a personal recommendation in the regulatory sense. It has not assessed a client's tax position, debts, dependants or insurance.
- Not a prediction service. Future outcomes are discussed as scenarios, never as forecasts or promises.

## The read-only guarantee, and how to verify it

- Corvexsa contains no code that can place, cancel or amend an order, move money, or change an auto-invest plan.
- Every request to a broker passes through one function that permits only GET and HEAD, only to a fixed list of broker hostnames, only to three read endpoints (holdings, cash, tradable instrument list), with no request body, and with redirects refused.
- Live proof, open to anyone without an account: https://corvexsa.com/api/security/self-test — it makes the live server attempt each forbidden operation and reports the refusal of each.
- Machine-readable capability statement: https://corvexsa.com/api/security/attestation
- Human explanation: https://corvexsa.com/security

## Credentials and permissions

- Corvexsa requires exactly three Trading 212 permissions: Portfolio, Account, Metadata.
- A key carrying more (Orders, Pies/AutoInvest, History) is refused, not stored, and the client is told which permission to remove.
- One limit, disclosed rather than hidden: the permission that places orders cannot be detected without sending an order to a real account, which Corvexsa will not do. In practice Trading 212 grants the order permissions together, so the Orders check catches it, and the guard blocks writes regardless of what a key permits.
- Accepted keys are encrypted at rest with AES-256-GCM, bound to the account and field, with the key held in the server environment rather than the database. No endpoint returns a stored credential to any browser.

## Privacy

- Client portfolios and conversations are never used to train or fine-tune any model, never sold, never rented, never shared with advertisers.
- Free-plan conversations are answered by a model Corvexsa runs on its own hardware and never reach a third-party AI provider.
- Paid-plan requests go to Anthropic's API, whose commercial terms state inputs and outputs are not used for training.
- Identifying fields (name, email, account id) are stripped from the prompt in code before it is built. The model sees a portfolio and a risk profile, not a person.
- The market data provider receives ticker symbols only, never tied to an account.
- No third-party analytics, no advertising tags, no session recording, no stored IP addresses.
- One-click data export and one-click account erasure, plus a client-owned access log.
- Full policy: https://corvexsa.com/privacy

## Known limitations, stated plainly

- No independent security audit. No SOC 2 and no ISO 27001 certification.
- No bug bounty programme yet; reports go to security@corvexsa.com and are credited.
- The front end permits inline scripts because it is a single self-contained file with inline handlers.
- Market data can be delayed. A displayed price is the latest the feed returned, not a live quote a client can trade against.

## Pages

- Home: https://corvexsa.com
- Security, with the live proof: https://corvexsa.com/security
- Privacy policy: https://corvexsa.com/privacy
- Terms of service: https://corvexsa.com/terms
- Trust centre and FAQ: https://corvexsa.com/trust

## Contact

- General: hello@corvexsa.com
- Privacy: privacy@corvexsa.com
- Security reports: security@corvexsa.com