5 layers between your data
and everything else.
Your financial data passes through 5 layers of protection, each designed to reduce unauthorized-access and leakage risk.
Last updated: 2026-10-14
Outermost Layer
Authentication
Stops threats before they enter
- OAuth 2.0 for the third-party integrations we support
- Authentication-provider throttling applies per Supabase Auth defaults
- Session expiry and refresh-token rotation per Supabase Auth defaults
Encryption Layer
AES-256 Encryption
Encrypted at rest and sent over HTTPS
- Customer-facing connections use HTTPS; the hosting provider supports TLS 1.2 and TLS 1.3
- Customer data at rest in the application database is encrypted with AES-256 by our database provider
- OAuth tokens for accounting integrations are held encrypted by our integration broker (Nango)
Isolation Layer
Tenant Isolation
Your data never touches another client’s
- Our backend scopes database queries by your organization
- Row Level Security (RLS) applies to direct database access
- Dashboard caches are keyed per tenant
- AI memory search is limited to your own organization’s data
- Automated tests cover tenant isolation and are run before changes are merged
Intelligence Layer
Traceable AI
Grounded answers carry a data trail
- Grounded AI chat answers cite the data sources consulted (LOCK-030 grounding contract)
- The AI reasoning log cannot be edited or deleted from a user session and is readable only within your organization
- Chat model calls through OpenRouter are sent with provider data collection set to deny
- Search embeddings are created through OpenAI’s paid API
- We do not use your data to train models
Core
Your Data
You own your data.
- We read your data to provide insights; we do not sell it
- Data export is available via our support channel for accounts in good standing
- You may request deletion at any time
- After account closure: 30 days to export, then deletion from production systems within 90 days. Billing and tax records are kept up to 7 years, and the AI reasoning log 7 years with your identity removed (Privacy Policy section 5)
All layers active
How We Build
Development Practices
Vulnerability Advisories
We update dependencies when a security advisory affects them.
Dependency Updates
We aim to keep production free of packages with known critical vulnerabilities.
AI Reasoning Log
Grounded AI chat answers write an append-only reasoning row capturing the data sources consulted (LOCK-030).
Access Control
Principle of least privilege applies to internal access; production access is restricted to authorized personnel.
Our Pledge
Plain English Commitments
No legal jargon. Just what we promise.
We do not sell your financial data.
We do not use your data to train models. Chat model calls through OpenRouter are sent with data collection set to deny, and search embeddings go to OpenAI’s paid API.
On grounded AI chat answers, we surface the data sources that informed each response (LOCK-030 grounding contract).
After account closure, you can export your data for 30 days, and we delete it from production systems within 90 days. We keep billing and tax records for up to 7 years, and the AI reasoning log for 7 years with your identity removed, as described in our Privacy Policy section 5.
We aim to notify affected customers without undue delay if we become aware of a personal data breach, consistent with GDPR Article 33.
Data export is available via our support channel for accounts in good standing.
— The EverCFO Team