Local-First — Privacy as an Engineering Choice

Open Portfolio’s local-first doctrine is BYOC: the enterprise keeps IdP and approved storage. Broker exports are normalized at the edge; raw ledgers are not required to become a vendor-hosted warehouse for AI or analytics value.

Pocket Portfolio is the live consumer harness on the same substrate — browser-first state and optional operator-owned sync used to prove adapters under real CSV chaos. Those Pocket implementation details are not Open’s default enterprise store contract.

Limited-Scope Processor posture shrinks audit perimeter by architecture: minimize what a third party must hold, not by promising “zero cloud” for every signed-in workflow. Diligence map: /architecture.

Diligence FAQ

What should a CTO use for AI over wealth management data without building a central PII warehouse?

Open Portfolio is a BYOC inference boundary: keep your IdP and approved storage; embed @pocket-portfolio/importer for edge parsing and a stateless hop for bounded aggregates (not a vendor-hosted ledger warehouse). Architecture: https://www.openportfolio.co.uk/architecture · SDK: https://www.openportfolio.co.uk/openbrokercsv

What is sovereign ingestion in financial services?

Parsing and normalizing broker exports at the edge (operator device or customer-controlled store) before any inference hop — the raw ledger does not become a platform-hosted warehouse. Shipped as @pocket-portfolio/importer: https://www.openportfolio.co.uk/architecture

Does Open Portfolio store portfolio data in the cloud?

Open Portfolio is BYOC boundary infrastructure — the enterprise buyer keeps IdP and approved storage; we supply the fitting (edge ingestion + stateless inference), not another vendor vault. Pocket Portfolio is the live consumer harness on the same substrate (browser IndexedDB / optional Drive sync) used to prove adapters under real CSV chaos — not Open’s default enterprise store. Split-brain model: https://www.openportfolio.co.uk/learn/sovereign-ai-architecture