Encrypted on your machine
The app keeps your records in an encrypted database on your own computer, protected by a key your operating system safeguards on the device, so the data isn’t readable if a machine or backup drive is lost or stolen.
Your portfolio data never leaves your institution.
FI Investment Tracker runs entirely on your own machine. Your holdings, CUSIPs, GL balances, source files, and reconciliation work stay inside your network. They are never sent to us, so there is no copy on our side to breach, subpoena, or lose. What reaches us is license and billing details, security logs, and the support messages and diagnostics you choose to send. This page explains exactly how that boundary works, so your IT, security, and exam teams can verify it themselves.
Not yet, and local-first changes the question. A SOC 2 report covers the controls a vendor runs over systems that hold its customers' data, and your portfolio data never reaches our systems: it stays on your machine, encrypted, under your IT controls.
What we do hold (license and billing details, security logs, and the support messages and diagnostics you choose to send) is the narrow boundary documented below.
Because the software is local-first, your data never reaches us in the first place. You install it on your own machine, your records stay encrypted on that machine, and your IT and security team can verify every claim on this page before and after purchase. There is nothing to onboard to our side and no data-residency questionnaire to clear.
We can’t leak what we never hold
We never store your portfolio, imported data, reports, general ledger balances, or reconciliation files on our servers. They live only on your computer, so there is no copy of your data on our side to breach.
We hold your license, never your book
Your portfolio is never sent to Granite Hall. We hold license and billing details, security logs, and the support messages and diagnostics you choose to send.
Built to be verified, not just trusted
How we verify software authenticity, test backups and restores, keep audit trails, handle support, and store local backups is all documented and available for your IT or security team to review.
Automatic backups
The app backs up your data automatically, and you can run a backup yourself anytime. Each backup is checked to confirm it’s complete, and a safety copy is made before a restore point is rolled back, so you have a point to return to. Restoring an encrypted backup file replaces the ledger on that computer, so keep a current backup first.
License separation
The license server receives license key and machine identity information, not holdings, CUSIPs, source files, or report packages.
Code-signed installers you can verify
Every Windows installer is digitally signed by the verified publisher GRANITE HALL SOLUTIONS LLC, the name your own machine displays at install time, confirming the file is authentic and unmodified. We also publish a verification fingerprint for each release so your IT team can confirm the download independently, and every build must clear release-channel and integrity checks before it reaches you. For your IT or security team: the product ships as Windows desktop software, and every Windows build is Authenticode code-signed with a published SHA-256 checksum.
Built-in audit trail
The app keeps a tamper-evident record of key actions (data imports, approvals, restores, reports generated, and other security-sensitive events), so you have a clear audit trail of what was done and when. Each computer has one operator sign-in today, so actions are recorded under that operator rather than under separate named users.
Stricter rules for borrower data
Online Loan Applications is not yet available. It will be the one place applicants’ personal information is involved, so it will be held to a deliberately higher bar: encrypted hosted document storage, malware scanning, separation of each institution’s data, defined retention rules, e-signature consent tracking, and legal review before it’s turned on for live applicants. None of this touches the local-first investment tracker described above.
Support never needs your sensitive files
To help you, our support team only needs logs, screenshots, your version number, and a description of the steps to reproduce an issue. Please don’t send portfolio files or borrower documents.
Security was the hard part. The rest is straightforward.
Your data stays yours, every release is signed and verifiable, and every claim here is documented for your reviewers. When your team is ready, pricing is public and you can be running on one real source file the same day.