What it can reach

The files you upload, and published sources on the open web when a task asks it to look something up. There is no integration with your accounting software, your bank, your email or your drive, and there is no setting that would add one. It cannot change a record, post an entry or move money anywhere, because it was never given a way to.

This is the deliberate part. AI gets things wrong, and a tool holding your credentials turns a wrong answer into a wrong entry. Here the worst case is a draft you correct.

If you have to run a security review

Most vendor questionnaires are about containing access you have already granted: API keys, OAuth scopes, who can reach which client record, how you revoke it later. There are no keys here to scope or revoke, so most of that form does not apply. What is left is where the files sit, who can see them, how long they stay and who processes them, and every one of those answers is on this page.

Where your files live

Your files, and everything built from them, are stored in the United States and backed up automatically. Only your account can see them, plus the operator who runs the service.

What happens during analysis

Analysis needs an AI model, so the part of your content it needs is sent to a model provider to be worked on. We send it only to providers that agree to the conditions below. We send those conditions with every single request.

• They do not keep your content after processing. This is called zero data retention.
• They do not train on it.
• We do not train on your data either, and we run no analytics or trackers.

We record which provider handled every request, so this can be checked rather than taken on trust.

How long we keep files

Your uploads, the text read out of them, and the files built for you are deleted at the end of your plan's window. Your answers, figures and citations stay. Every deletion is checked, and one that fails is reported rather than hidden.

Code that runs on your numbers

When the AI writes code to work out your figures, it runs in a sealed box with no network of its own. It can reach this one task's files and nothing else, not your other tasks and never another customer's.

Accounts and payments

No trackers, no analytics, no third party scripts. Everything on this page, fonts included, comes from our own server. Passwords are stored scrambled and cannot be read back, by us or by anyone else. Payments are handled by Stripe, so card numbers never reach us.