Skip to content
BranchesTags

Repository files navigation

Finora Logo

🛡️ FINORA

Institutional Portfolio Risk Desk & Wealth Intelligence Engine

Deterministic On-Device Factor Decomposition · SEBI RIA Mandate Engine · Groq-Powered Multi-Client AI Copilot

CI/CD Release Pipeline Latest Release License: MIT

Flutter Dart Electron Vite FastAPI Python Groq Supabase Security

Executive Overview • Architecture • Mobile App • Advisor Workstation • Quant Backend • Security & SEBI • Direct Downloads • Quick Start

📖 Executive Overview

Finora is a unified, institutional-grade portfolio risk and wealth advisory ecosystem designed for high-net-worth investors, family offices, and SEBI Registered Investment Advisors (RIAs).

Traditional wealth apps provide superficial NAV graphs and basic asset allocation charts. Finora penetrates beneath the surface—ingesting Consolidated Account Statements (CAS), decomposing multi-fund portfolios into raw equity holdings, detecting hidden concentration risks, computing true pairwise portfolio overlaps, and quantifying fee drags across active funds.

The Finora Advantage

┌────────────────────────────────────────────────────────────────────────────────────────┐
│                                  TRADITIONAL WEALTH APPS                                │
│   "You hold 14 Mutual Funds across 6 AMCs — Great Diversification!"                    │
└────────────────────────────────────────────────────────────────────────────────────────┘
                                           vs.
┌────────────────────────────────────────────────────────────────────────────────────────┐
│                                    FINORA RISK DESK                                    │
│   "71.4% Overlap across 14 funds. Your actual exposure collapses into just 2.3       │
│    independent equity bets with a 42.1% hidden concentration in Reliance & HDFC.      │
│    Annual fee drag: ₹48,600 with zero alpha diversification."                         │
└────────────────────────────────────────────────────────────────────────────────────────┘

🏛️ Architecture & System Topology

Finora is engineered with a strict local-first privacy posture, pairing on-device cryptographic operations with a high-throughput quantitative risk backend:

graph TD
    subgraph MobileClient ["📱 Finora Mobile (Flutter Engine)"]
        CAS["📄 CAS PDF Statement (CAMS/KFin/NSDL)"]
        Parser["🔐 Pure-Dart On-Device CAS Parser"]
        Storage["🔒 Hardware Keystore / Secure Enclave"]
        Lock["🛡️ 6-Min Auto-Lock & Biometric Gate"]
        HealthScore["📊 Health Score (0-100) & Waterfall"]
        WhatIf["🔄 What-If Rebalancing Simulator"]
        MobileChat["💬 Groq Client Copilot + Whisper STT"]

        CAS --> Parser
        Parser --> Storage
        Storage --> HealthScore
        HealthScore --> WhatIf
        Storage --> MobileChat
        Lock -.-> Storage
    end

    subgraph DesktopWorkstation ["🖥️ Finora Advisor Workstation (Electron + Vite)"]
        Queue["🚨 Executive Action Queue (Severity Matrix)"]
        Roster["👥 Managed Client Roster & Mandates"]
        Copilot["🤖 Multi-Client FRM AI Copilot (@mentions & #signals)"]
        ChatDesk["💬 Real-Time Client Consultation Chat"]
        AuditDesk["📜 SHA-256 Hash Chain Audit Inspector"]
        LookThrough["🔍 Deep Holdings Look-Through & Weight Breakdown"]

        Queue <--> Roster
        Roster <--> Copilot
        Queue <--> ChatDesk
        LookThrough <--> AuditDesk
    end

    subgraph BackendCore ["⚡ Finora High-Performance Quant Backend (FastAPI)"]
        Router["🌐 Fast API Router (/api/v1)"]
        Engine["⚙️ Deterministic Risk & Attribution Engine"]
        GroqService["🧠 Groq LLM Multi-Client Tool Execution Loop"]
        AuditLedger["🔗 Cryptographic SHA-256 Immutable Audit Chain"]
        DB["🗄️ Supabase PostgreSQL (Strict Row-Level Security)"]

        Router --> Engine
        Router --> GroqService
        Engine --> AuditLedger
        Router --> DB
    end

    MobileClient <==> |"TLS 1.3 + SSL Pinning (Paise & Bps JSON)"| BackendCore
    DesktopWorkstation <==> |"Institutional Real-Time Session (5s Live Sync)"| BackendCore
Loading

📱 Finora Mobile App

The consumer and client-facing application, built with Flutter and themed in a Warm Obsidian (#12100E) and Ember Coral (#FA5A32) luxury aesthetic.

🔐 100% On-Device Ingest 📊 Health Score & Waterfall 🔄 What-If Simulator
Parses password-protected CAMS, KFintech, and NSDL statements on-device. Zero PDF or credential upload to the cloud. Deterministic 0–100 portfolio score with an interactive deduction waterfall revealing exact basis-point penalties. Simulate trimming overweight securities (e.g. Reliance 42% → 30%) with live volatility reduction previews.
🔍 Fund Overlap Matrix 💬 AI Portfolio Assistant 🛡️ Hardware Enclave Vault
Look-through overlap exposing equity duplication and fee drag across large-cap and flexi-cap schemes. Groq-powered conversational assistant with voice transcription (Whisper STT) and actionable prompt chips. Android Keystore RSA-OAEP + AES-GCM encryption with 6-minute background auto-lock and FLAG_SECURE protection.

Key Mobile Capabilities:

  • Dual Authentication: Supabase Email 6-digit OTP verification + Google OAuth sign-in.
  • Strict Privacy Mode: System-wide FLAG_SECURE blocks screen captures and recording of sensitive financial data.
  • Network Security Configuration: SSL certificate pinning rejecting unauthorized proxy certificates.

🖥️ Finora Advisor Workstation (Desktop)

A specialized desktop suite for Financial Risk Managers (FRMs), Chief Investment Officers, and SEBI Registered Investment Advisors.

Advisor Desktop Interface

Institutional FRM Command Center (Electron 34 + Vite + Vanilla CSS)

✨ Workstation Features:

  1. 🚨 Standardized 3-Column Finding Cards:

    • Every risk breach is framed cleanly: OBSERVED VALUE vs. MANDATE CAP vs. CAPITAL AT STAKE.
    • Strips distracting marketing prefixes (e.g. converts "Nippon India Small Cap Fund - Growth Option - Direct Plan" $\rightarrow$ "Nippon India Small Cap").
    • Direct shortcuts for Inspect Attribution, Advisory Chat, View Portfolio, and Advance Status.

  2. 🤖 Multi-Client FRM AI Copilot:

    • Connected directly to Groq's high-speed inference engine.
    • @mention Client Autocomplete: Type @Rahul to instantly pull that client's complete holdings, asset classes, and risk flags into the prompt context.
    • #mention Signal Autocomplete: Type #SINGLE_STOCK_CAP or #PAIRWISE_OVERLAP to analyze mathematical root causes and counterfactual rebalancing.
    • Interactive Chart Widgets: Renders dynamic SVG/Canvas allocation bars and pie charts directly in the advisor conversation.
    • 1-Click Rebalance Proposals: Generates SEBI-compliant rebalance notes ready to copy to clipboard or send directly into client consultation threads.

  3. 💬 Real-Time Client Consultation Chat:

    • Direct advisor-to-client consultation threads linked to backend episodes (/api/v1/episodes/{id}/chat).
    • Quick wealth advisory response chips ("Reviewing Allocation", "Rebalance Proposal", "Request Confirmation").
    • Real-time 1.5-second polling while consultation modals are active.

  4. 📜 Cryptographic SHA-256 Audit Trail:

    • Every advisory action, mandate change, and client consent is recorded in a tamper-evident SHA-256 cryptographic hash chain.
    • 1-Click Re-Verify Chain button validates historical ledger integrity in real time.

  5. ⚡ Continuous Background Sync:

    • Auto-refreshes the entire book of business and findings queue every 5 seconds as clients upload statements on mobile.

⚡ Finora Quant Backend

The core microservice orchestrating data normalization, risk calculations, and advisory communication.

  • Framework: Python 3.12, FastAPI, and uv.
  • Database: Supabase PostgreSQL with strict Row-Level Security (RLS) ensuring complete multi-tenant advisor-client isolation.
  • Rule Engine: Deterministic math calculating HHI concentration, effective number of bets ($N_{eff}$), active share, and tax-loss harvesting opportunities.
  • AI Tool Execution Loop: Multi-tool calling agent with automated schema execution (get_firm_overview, get_all_clients, get_client_portfolio, get_signal_attribution, render_chart, draft_rebalance_order).

🔒 Security, Biometrics & SEBI Compliance

Security Dimension Implementation Standard
Hardware Key Storage flutter_secure_storage storing keys in Android Keystore and iOS Secure Enclave using RSA-ECB-OAEP + AES-GCM-256
Biometric Gate local_auth platform authentication (Biometrics / Face ID with device PIN fallback)
Inactivity Auto-Lock 6-minute background idle lifecycle timer requiring biometric re-authentication upon resume
Screen Protection FLAG_SECURE applied natively in Android MainActivity.kt to block screenshots & screen recordings
Network Security Custom Android network_security_config.xml enforcing strict domain pinning
SEBI Audit Compliance Cryptographic SHA-256 hash chains on every advisory override and consultation message
Data Privacy CAS statement PDFs are parsed on-device in pure Dart. No raw statements ever touch cloud servers

📦 Downloads & Releases

GitHub Actions CI/CD automatically compiles, tests, and publishes standalone packages on every tagged release:

🖥️ Desktop Workstation (Windows)

Artifact Format Description
1-Click Setup Installer .exe (NSIS) Finora-Advisor-Workstation-Setup-v1.0.0.exe (Automatic install with Desktop & Start Menu shortcuts)
Standalone Portable .exe Finora-Advisor-Workstation-Portable-v1.0.0.exe (Zero-installation portable binary)
Zip Archive .zip Finora Advisor Workstation-1.0.0-win.zip (Full standalone directory distribution)

📱 Mobile Applications (Android & iOS)

Artifact Format Target Architecture
Universal Android APK .apk Universal package compatible with all ARM & x86 Android devices
ARM64-v8a Android APK .apk Optimized 64-bit package for modern Android smartphones
Google Play App Bundle .aab Official production release bundle for Google Play Store
iOS IPA Payload .ipa Unsigned iOS distribution for TestFlight or sideloading

👉 Download Latest Binaries from GitHub Releases

🚀 Quick Start

Prerequisites

  • Flutter SDK: ^3.47.0
  • Node.js: ^20.0.0
  • Python: ^3.12
  • uv: Fast Python package installer

1. Run Mobile App

cd finora_app

# 1. Install Flutter dependencies
flutter pub get

# 2. Configure environment
cp .env.example .env

# 3. Launch on connected device / emulator
flutter run

2. Run Desktop Workstation (Advisor Suite)

cd finora_desktop

# 1. Install dependencies
npm install

# 2. Start development mode with Vite + Electron
npm run dev

# 3. Compile Windows Setup Installer (.exe) & Portable (.exe)
npm run build:exe

3. Run Quantitative Backend API

cd finora_backend

# 1. Create and activate virtual environment
uv venv
.venv\Scripts\activate   # On Windows
# source .venv/bin/activate  # On Linux/macOS

# 2. Install dependencies
uv pip install -e .

# 3. Launch FastAPI server with auto-reload
uv run uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload

Interactive OpenAPI Swagger documentation will be available at http://127.0.0.1:8000/docs.

📂 Repository Structure

Finora/
├── finora_app/                     # 📱 Mobile Application (Flutter)
│   ├── lib/
│   │   ├── core/services/          # Secure Storage, Biometrics, Supabase, Groq Assistant
│   │   ├── screens/entry/          # Splash, Onboarding, Email OTP Sheet, PIN Gate
│   │   ├── screens/main/           # Portfolio Health Waterfall, Overlap Matrix, Simulator
│   │   └── widgets/                # AppLockWrapper, Metric Cards, Charts
│   └── android/                    # FLAG_SECURE MainActivity & Network Security Config
│
├── finora_desktop/                 # 🖥️ Desktop Advisor Suite (Electron + Vite)
│   ├── src/main/                   # Electron Main Process & Window Controls
│   ├── src/renderer/               # FRM Workstation UI, Multi-Client AI Copilot, Audit Trail
│   └── package.json                # electron-builder NSIS Setup & Portable configuration
│
├── finora_backend/                 # ⚡ Quant Backend Microservice (FastAPI)
│   ├── app/api/v1/endpoints/       # Queue, Roster, Advisor AI Copilot, Audit Ledger, Chat
│   ├── app/services/               # Factor Decomposition, Groq Tool Loop, Hash Chain
│   └── app/db/                     # SQLAlchemy Models & Supabase Pooler Sessions
│
└── .github/workflows/              # 🚀 CI/CD Multi-Architecture Release Pipeline
    └── release.yml                 # Automated APK, AAB, IPA, NSIS .exe, and GitHub Release

⚖️ Regulatory Notice & Disclaimers

Important

Finora is a quantitative risk analysis and portfolio diagnostics engine.

  • All factor decompositions, overlap matrices, and health scores are mathematical observations derived strictly from reported portfolio holdings against pre-configured risk parameters.
  • The AI Copilot operates under strict non-recommendation guidelines, presenting factual variance and attribution without providing unsolicited trading advice.
  • All client-specific parameter overrides require explicit justification logging stored within an immutable cryptographic audit ledger in compliance with SEBI Registered Investment Advisor (RIA) governance standards.

📄 License

Distributed under the MIT License. See LICENSE for more information.

Built with precision for the next generation of wealth advisors and intelligent investors.

About

No description, website, or topics provided.

Resources

Readme
Activity

Stars

1 star

Watchers

0 watching

Forks

1 fork
Report repository

Releases

Packages

Contributors

Languages