PORTFOLEO.AI PRE-LAUNCH REQUEST ACCESS

PRIVATE · PROVENANCE-FIRST · KEYBOARD-FIRST

Research that leaves your machine. Numbers you cannot trace. Figures a model invented.

Portfoleo removes all three: a keyboard-driven research terminal whose AI can run entirely on your own machine, where every figure carries its source and its as-of time and every statistic is computed by audited Python — the model narrates, it never supplies the number.

Request early access or Read the documentation

Pre-launch: email only, no card and no sales call. Full status further down.

> Demonstration — sample workspace, not market data. --:--:-- ET
CHART NVDA · 1D SAMPLE

Sample series invented for this page — not market data, not a price, not a quote.

1D · 5M BARS SAMPLE · ILLUSTRATIVE
WATCH Core basket SAMPLE

Sample watchlist invented for this page — not market data, not prices, not quotes.

SYM LAST CHG% AGE
NVDA184.22+1.840.4s
SPY648.10+0.310.4s
QQQ583.77+0.520.5s
AVGO352.06−0.770.6s
TSLA421.55−1.1264s
^VIX14.86−2.401.1s
^TNX4.118+0.093.0s
MOVE NVDA · why is it moving SAMPLE

Sample output invented for this page — not market data, and no wire was read.

Up 1.84% on 1.4× its 20-day ATR — notable, not extreme. Volume is running 1.9× the 20-day median. Two catalysts are in the wire [1][2].

Invented headlines — no wire was read
[1] Supplier guidance raised — 14:02Z
[2] Sell-side target revision — 13:41Z
SAMPLE · FIGURES COMPUTED, NOT GENERATED
FA NVDA · income SAMPLE · IN MILLIONS

Sample income statement invented for this page — not filings data and not any issuer’s reported figures.

LINE FY-1 FY GROWTH
Revenue48,31091,780+90.0%
Gross profit33,12066,540+100.9%
Operating inc24,40552,910+116.8%
Net income21,86047,320+116.5%
Diluted EPS0.881.90+115.9%
> move NVDA ⌘K COMMAND PALETTE
SAMPLE TAPE · NOT A MARKET FEED SAMPLE · NOT A FEED

DEMONSTRATION · SAMPLE WORKSPACE · NOT MARKET DATA This is a demonstration of the interface, not a product you can open today. Real chrome, real layout, real component code — illustrative figures. Every number above is invented for this page. Nothing in it is market data, a quote, a price, a filing or a headline, and none of it should be read as one. The only live value on the panel is the clock. When the sandbox opens it will run on a licensed snapshot and every field will carry a real provenance chip.

POSITIONING

Private. Provenance-first. Deterministic. Yours.

Four properties, each one a mechanism you can inspect rather than an adjective you have to trust. As of July 2026 we have not found another commercial terminal that ships all four together — if you find one, we want to know.

The AI runs where you tell it to

Portfoleo can speak to a model running on your own machine. In local-model mode nothing you ask, no position you hold and no document you load is transmitted to a model vendor — because there is no vendor in the path. Prefer a hosted model? Paste your own key; the request is yours, on your account, under your agreement.

MECHANISM · a provider layer with a local backend, a capability gate and a spend budget. Not a setting we promise to honour — a path with no outbound request in it.

Every field carries its source

Source, as-of time, cache age and delay class travel with the data all the way to the pixel. Hover any figure and it tells you where it came from and how old it is. Feeds are never silently blended. Delayed data says delayed. Stale data dims itself and stops animating rather than pretending to be live.

MECHANISM · one provenance record, three renderings: a chip beside the value, the panel header slot, and an AGE column in every monitor. Documented in the provenance model.

The math is deterministic

Returns, volatility, betas, Greeks, factor loadings, drawdowns, attribution — all computed by audited Python library code. The language model is handed the finished figures and asked to explain them. It is never the system of record for a number, so it cannot round one, drift one, or invent one.

MECHANISM · the evidence frame is built and sent first; narration streams second. The order is enforced by the software, not by a prompt.

Bring your own entitlements

We are a software layer, not a data reseller. Connect the market-data and model subscriptions you already hold and your usage stays inside agreements you already signed. No redistribution mark-up, and no exchange surcharge passed through to you because we are not passing exchange data through.

MECHANISM · per-user credentials, encrypted at rest, resolved per request. A shared cache raises rather than accepts a value fetched under your key. Stated in full on the security page.

WHO THIS IS FOR

Built for the desk that will not upload its book.

Portfoleo is not a terminal for everyone, and pretending otherwise would be the first untraceable claim on the page. It is shaped for people whose research is the asset — and it states plainly, below, who should buy something else.

INDEPENDENT ANALYST

Your search history is your thesis

The names you pull up, the screens you save and the questions you ask are the work product, not the exhaust from it. In local-model mode there is no vendor in the path to collect them, so the idea stays yours until you publish it.

FAMILY OFFICE · RIA

The positions are not yours to upload

A client book is somebody else's holdings under your duty of care. Portfoleo brings the analytics to the data instead of the other way around, and the deployment is one you can run and inspect rather than one you have to take on faith.

PM · ANALYST AT A FIRM WITH A COMPLIANCE DESK

Someone will ask where the number came from

Every figure carries its source, its as-of time, its cache age and its delay class all the way to the pixel, and every statistic has a documented formula behind it. A memo written from this screen can be defended line by line months later.

QUANT · SYSTEMATIC RESEARCHER

Your best backtest is probably luck

The validation lab ships the overfitting literature as windows — reality check, SPA, PBO, deflated Sharpe, purged and embargoed CPCV — each named after the paper it implements so you can check the implementation against the source.

DESK THAT ALREADY PAYS FOR DATA

You have the entitlements. You need the instrument

Connect the market-data and model subscriptions you already hold and your usage stays inside agreements you already signed. No redistribution mark-up, and no exchange surcharge passed through, because no exchange data passes through us.

ENGINEER · BUILDER

You would rather read the method than the brochure

The command grammar, the window catalog, the provenance model and every analytic method with its assumptions and its limits are published. If a method is not documented, it is not shipped.

Buy something else if

  • You want a vendor to carry the data relationship for you. A full-service terminal that licenses, consolidates and resells the feed in the seat price is the better answer today. Portfoleo is a software layer you point at your own entitlements; the pricing page argues that trade honestly, in both directions.
  • You need to place orders. No tier routes them. The order-routing code is excluded from the build entirely, so it is absent rather than disabled, and it is not on the roadmap.
  • Your firm needs a completed SOC 2 or ISO 27001 before it can sign. Neither is held. The security page lists every certification we do not have, unhedged, next to the mechanisms we do.
  • You need real-time consolidated exchange data resold to you. Deliberately not done, at any tier — see the ledger.
  • You want a seat this afternoon. Checkout is not open and no seat can be bought. The honest version of the timeline is further down.

Losing a reader on this list is the point. A page that fits everyone fits nobody, and a pre-launch product that will not say who it is wrong for has not earned the paragraphs above it.

THE METHOD — THE EVIDENCE FRAME

How a number reaches your screen.

Every answer in Portfoleo is assembled in the same four steps, in the same order, whether it is a one-line quote or a full attribution run. The order is the product: the figures exist before the sentence does, so the sentence can only describe them. Each step is documented, with the formula and the source, in the methodology reference.

01Resolve The command is parsed to an exact instrument and an exact window type. An unknown token is refused, not fuzzy-matched to the nearest thing that would have run. Refuses rather than guesses
02Compute Every statistic is produced by audited Python library code with a documented formula — returns, volatility, betas, Greeks, factor loadings, drawdowns, attribution, validation statistics. Deterministic: same inputs, same output
03Attach provenance Each value is stamped with its source, its as-of time, its cache age and its delay class before it is allowed onto a panel. A value that cannot be stamped is not displayed as a value. Source and as-of travel to the pixel
04Narrate Only now is the model called, and it is handed the finished, numbered evidence. It writes prose and citations. It is never asked for a figure, and it has no path to supply one. The model explains; it does not calculate

This is why the claim is zero numbers invented by the model and not “low hallucination rate”. A rate implies the model is in the number path and usually gets it right. It is not in the path at all. The full window catalog, the command grammar, the documented analytic methods and the provenance model are published at /docs — read them before you believe any of this.

PROOF, NOT ADJECTIVES

The same question, asked twice.

Every AI finance product says it is accurate. Here is the difference stated as a mechanism: a general assistant produces a figure; Portfoleo is handed one.

CHAT A general assistant ILLUSTRATION

Illustration written for this page — not real model output, and 2.3% is an invented figure.

“NVDA is up about 2.3% today, driven by strong demand for AI accelerators and positive analyst sentiment following recent guidance.”

Where did 2.3% come from? Which analyst? Which guidance, and when? As of what time, in what timezone, from which venue? None of it is answerable, and none of it is reproducible tomorrow.

Plausible · unsourced · not reproducible
MOVE Portfoleo ILLUSTRATION

Illustration written for this page — not a screenshot, not a live session, every figure invented.

“Up 1.84% on 1.4× its 20-day ATR — notable, not extreme. Volume 1.9× the 20-day median. Two catalysts in the wire [1][2].”

[1] Supplier guidance raised — 14:02Z
[2] Sell-side target revision — 13:41Z

In the product, 1.84, 1.4× and 1.9× are computed and handed to the model inside the prompt, and the headlines are numbered before the model sees them. If the wire is empty, the model is instructed to say there is no clear catalyst — and abstaining is a passing answer.

Computed · cited · reproducible

Both panels are illustrations of a mechanism, not screenshots of a live session, and every figure in them is invented for this page. The mechanism is real: a computed evidence frame is assembled first and the narration streams after it.

THE PRIVACY LEDGER

Audited by your own browser, right now.

Marketing pages ask you to believe a privacy claim. This one is measured in your browser from the Resource Timing API as you read it, and you can check every line in your own developer tools without leaving the page.

AUDIT This page COMPUTED AT LOAD
CHECKMEASURED
Requests to a third-party origin—
Distinct third-party origins—
Assets served from this origin—
Web fonts, and where from—
Cookies set—
Analytics or tag managers—
Third-party script tags in the DOM—
… of those, blocked before loading—

Read the numbers, not this paragraph. This page ships with no content delivery network, no web font service, no tag manager, no analytics and no session recorder in its source, and every asset it references is served from portfoleo.ai. But the source is not the last thing that touches the response. Our own host currently injects a Cloudflare Web Analytics beacon — a <script> pointing at static.cloudflareinsights.com — into this HTML at the edge, after it leaves the repository. It is not in the file. It is in what you received, so the table counts it, and it will keep counting it until the setting is off.

What did hold is the mechanism. The Content-Security-Policy this site sends starts from default-src 'none' with every fetch directive resolving to 'self' or 'none' — no host, no wildcard — so the injected beacon was refused by your browser before a byte of it loaded: its transfer size is zero and it never ran. That is the claim this section actually makes — a third-party request is blocked even when it is shipped by accident — and it is the one worth checking in your own network panel. The remaining stated gaps: inline styles and scripts are still permitted on this page, and a blocked script is still a script somebody put in your response. The security page writes both out rather than hiding them.

THE COMMAND LANGUAGE

Type two letters. Get a window.

Short mnemonics resolve to window types. The bar accepts function-first (CHART NVDA), the classic ticker-first order (NVDA GP), or a bare ticker. It ghost-completes as you type, and on an unknown token it refuses rather than fuzzy-running the nearest thing. The complete catalog and grammar are published in the docs; six examples follow.

PRISK

Live portfolio risk

A live exposure surface over the book you are holding: gross and net, concentration, factor tilts and the limits each one is measured against. It updates on the same stream the monitors use, so the risk number and the price it came from cannot drift apart.

Aliases prisk · liverisk

WFLOW

Agentic workflows, pinned to panels

Run a multi-step research workflow and watch each artifact it produces — a table, a chart, a note — arrive with a PIN button that opens it as a first-class panel in your workspace. The agent holds read-only tools. It cannot trade, by construction.

Aliases wflow · workflow · workflows

MOVE

Why is it moving

Computes the move against its own 20-day ATR and volume distribution, pulls the wire, numbers the headlines, and only then streams a narration that cites them [1][2]. If the wire has nothing, it is instructed to say there is no clear catalyst instead of manufacturing one.

Streamed · evidence frame first, narration second

RULES

Alerts that fire through your own sinks

Build price, percent-change and news-keyword rules, preview them, enable them. They fire into the alert console and out through the sinks you configure — webhook, e-mail, Telegram, desktop — deduplicated per story so one headline does not page you five times.

Aliases rules · alertrules · notify

OMON

Options chain that shows the formula

Calls, strikes and puts with Black-Scholes-Merton Greeks and solved implied volatility — plus the IV smile, max-pain, and a show-the-math block that prints the actual expressions used. Where the feed supplies Greeks we say so; where we derive them we say that too.

Aliases omon · opt · options

EQS

Screening, comps and the rest of the desk

Multi-criteria screening with saved screens, plus COMPS peer tables, DES company pages with analysts, holders, actions and earnings, CF EDGAR filings, YCRV yield curves, ECOG macro series, and PRED prediction-market odds from CFTC-regulated event contracts.

One workspace · link groups · saved layouts · pop-out windows

THE VALIDATION LAB

The statistics that tell you your backtest is noise.

If you test enough strategies, one of them looks brilliant by luck. There is a twenty-five-year literature on measuring exactly that, and almost none of it reaches a commercial terminal. Portfoleo ships it as windows, each one named after the paper it implements so you can check the implementation against the source. We have not found these in any terminal we have priced, at any price (July 2026).

White’s Reality Check Bootstraps the whole family of strategies you tried, so the best one is judged against the best of the noise — not against zero. White (2000)
Hansen SPA The studentised successor: less sensitive to poor and irrelevant candidates dragging the null around, which is the usual failure of a raw reality check. Hansen (2005)
PBO by CSCV Probability of backtest overfitting, by combinatorially symmetric cross-validation. Answers “how often would the in-sample winner underperform the median out of sample”. Bailey, Borwein, López de Prado & Zhu (2016)
Deflated Sharpe Ratio Scales the significance threshold by the number of trials actually run, plus skew and kurtosis. A Sharpe of 2 from 500 attempts is not a Sharpe of 2. Bailey & López de Prado (2014)
Purged, embargoed CPCV Combinatorial cross-validation that purges training observations overlapping the test labels and embargoes the window after — because financial labels leak across time. López de Prado (2018)
Hierarchical Risk Parity Allocation by hierarchical clustering and recursive bisection instead of inverting a covariance matrix you do not trust. Available at every optimiser call site. López de Prado (2016)

These are not a marketing appendix. They are wired into a gate: when the composite reading is unknown or failing, the system reports STAND DOWN and says which criterion failed. An unknown value is treated as a failure, never as a pass. Each method is written up, with its assumptions and its limits, in the methodology reference.

FAIL CLOSED

What the terminal does when it does not know.

Most software fails open: when something is missing it shows a stale value, a plausible default, or a shimmering rectangle where a price will be. On an instrument you make decisions with, that is the most expensive design choice available.

No order execution. Ever.

Portfoleo does not connect to a broker, does not route orders, and does not place trades. Position tracking is paper-only. This is not a feature waiting for a licence and it is not on the roadmap — the order-routing code is excluded from the hosted build entirely, so it is absent rather than disabled.

A wrong-symbol response is refused

Feeds are guarded: a payload that comes back for the wrong instrument is rejected, not displayed. Cross-wire contamination is the failure mode nobody talks about and the one that quietly poisons a whole screen.

Missing data shows the failure

When a value cannot be fetched you see the failure and the name of the thing that failed. Never a fallback number, never a last-known value dressed as fresh, never “something went wrong”.

Stale data dims and stops moving

A stale row is demoted, labelled with its age, and forbidden from animating. It stays readable — hiding it would be its own lie — but it never gets to look live.

No skeletons over numbers

A shimmering placeholder where a price will be is a claim that a price is arriving. It may not arrive. Numeric surfaces get a static placeholder and a pending provenance chip instead.

The command bar refuses

Type something that matches nothing and the progress underline turns red and the empty state says so. It will not guess, and it will not silently run the closest match it found.

SECURITY & PRIVACY POSTURE

What we have, and what we do not have yet.

Claiming a certification you cannot produce is the fastest way to lose a security-minded reader, so both columns are published. The long version — the threat model and its limits, the key-encryption mechanism, what an operator can and cannot see — is on the security page.

What we have instead

Plus a deployment you can run and inspect yourself. Portfoleo has not launched: some of this is implemented and covered by tests, and some is the design the hosted build is being brought up to before it takes a paying customer. The security page marks which is which, control by control, and the ledger below lists what is still being written.

Not held — stated, not implied

  • ✗ No SOC 2, Type I or Type II
  • ✗ No ISO 27001
  • ✗ No independent penetration-test report
  • ✗ No bug bounty programme or paid rewards
  • ✗ No single sign-on, SAML or SCIM
  • ✗ No European data residency, and no published uptime SLA

If your firm needs a completed questionnaire, a sub-processor list or a data-processing agreement, ask and you get the honest version — blanks included.

THE WRITTEN RECORD

Read the documentation before you believe the page.

A pre-launch product cannot borrow credibility from customers it does not have. What it can do is publish enough detail to be argued with, and keep a dated record of every change — including the claims it has had to withdraw.

Changelog

2026-07-26SITE 0.1LATEST

ADDA security and architecture page stating the key-encryption mechanism, the threat model and its limits, and an unhedged list of the certifications we do not hold.

ADDA documentation index: the window catalog, the command grammar, the documented analytic methods and the provenance model.

REMOVEThe retired claim that the product performs confirm-gated order execution: the hosted build contains no broker code, does not route orders, and never will.

HOW IT WORKS · entries are dated and never edited after publication; a correction is a new entry saying what the old one got wrong. Removals and regressions are listed in the same voice as features. Read the full changelog.

STATUS

Pre-launch, said plainly.

Portfoleo has no customers, no case studies and no usage metrics, so there are none on this page. What there is instead: a published method, a security posture with its gaps listed, documentation deep enough to argue with, and a changelog that records removals as well as additions. Judge it on those.

PRE-LAUNCH Product status A private build. Not hosted, not purchasable, no accounts, no users
CLOSED Checkout The price ladder is published and fixed; no seat can be bought yet
BUILDING Public sandbox What it will be, and what gates it, is written out at /demo
NONE Order routing, any tier Structural, not a setting — see the hard rule
2026-07-26 Last published change Dated and permanent in the changelog

PRE-LAUNCH POSTURE · NO CUSTOMERS, NO LOGOS, NO TESTIMONIALS, NO USAGE STATISTICS — BECAUSE THERE ARE NONE TO REPORT

THE LEDGER

What is running, what is being built, what we will not do.

A fail-closed brand does not get to be vague about its own status. Portfoleo is in private build: the engine below runs every day, and the commercial layer around it is being written now.

Running today

  • ✓ The engine: the full window set and command language
  • ✓ Provenance on every displayed surface
  • ✓ Local-model mode and bring-your-own keys
  • ✓ The validation and risk labs
  • ✓ Charting with drawing tools, options analytics, screening, filings, macro
  • ✓ Alert rules and the alert console

Being built now

  • ● Hosted accounts and per-user isolation
  • ● Encrypted per-user credential vault
  • ● Billing and checkout against the published ladder
  • ● The public sandbox at /demo — no signup
  • ● The licensed data snapshot behind it
  • ● The public command reference

Deliberately not doing

  • ✗ Routing or placing orders, at any tier
  • ✗ Reselling real-time consolidated exchange data
  • ✗ Personalised investment advice
  • ✗ Fixed-income derivatives analytics
  • ✗ Third-party trackers, tag managers, session recorders
  • ✗ Selling, sharing or brokering your data
ACCESS

Early access opens in small cohorts.

Researchers, PMs and quants who will actually use the command bar go first, because a dense keyboard terminal is shaped by the people who live in it. Leave an email and we will write when a seat opens — not before, and not about anything else.

Stored only to contact you about access. Not sold, not shared, not used to build a profile. One address, one row, deletable on request. There is no tracking pixel in the email either.