Security
Security and data handling.
Your firm holds client information under professional and legal obligations that do not transfer to a vendor. Our handling operates inside them.
Data protection
We encrypt all engagement data in transit (TLS 1.2+) and at rest (AES-256).
We logically isolate engagement data by firm and by engagement.
You can configure data retention per engagement. We honor deletion requests without delay and in full.
Model training
No file, extraction, or output from your firm is used to train or fine-tune any model, ours or a third party's.
Access control
Role-based access control separates analysts, reviewers, and partners within each engagement.
We restrict, log, and review access to production systems.
We access customer data for support only with your explicit permission.
Auditability
We write every upload, mapping decision, finding, and reviewer action to an immutable audit log.
Every generated number carries source lineage: the file, sheet, and row range it came from.
Arithmetic is deterministic. Language models draft rationale and narrative, but they never calculate a number.
Working with your obligations
Section 7216 consent, the FTC Safeguards Rule, AICPA confidentiality, and peer review cooperation are your obligations, not ours to assume. Our handling is built to sit inside them, and the specifics are agreed per engagement.
Every firm signs an NDA before we share any engagement data.
We offer a data processing agreement to every customer.
We use synthetic or anonymized data for demos and evaluation until consent and a DPA are in place.
We complete security questionnaires as part of any pilot.
Deployment and engagement terms
Deployment options, subprocessors, and engagement-specific confidentiality terms, including peer review cooperation, are scoped per firm as part of the DPA and pilot agreement.
Ask us directly, we answer specifically rather than publishing a generic policy that may not fit your engagement.
Compliance
We are building Numeri to the compliance bar expected of financial technology. Both programs below are in progress. Neither is certified yet. We will publish status updates here as they complete.
Ask about our security posture.
Email us and we will send a direct, technical answer.
Bring the questionnaire to the call.
We complete security questionnaires as part of any pilot, and we answer the specifics for your engagement rather than pointing at a generic policy.
Book a workflow assessment