Security & trust
Built for material non-public information.
Earnings preparation handles your most sensitive numbers. These are the controls in the product today, and where we stand on independent attestation.
Data isolation and access
- Every workspace is isolated; access is checked on the server for every request.
- Role-based permissions as data: owner, CFO, controller, FP&A, IR, directors, auditors.
- Approvals with quorum and separation of duties; AI agents can never approve.
Audit trail
- A hash-chained ledger of decisions, data loads, connector reads and configuration changes.
- Verification on demand shows whether the chain is intact.
- Every number keeps its lineage to the source file, cell or connector.
Connections and credentials
- Connectors are read-only by default; REST can only send GET.
- Tokens are encrypted at rest and never returned by the API.
- Outbound requests are restricted to HTTPS public hosts in production, without redirects.
Disclosure and AI
- Reg FD and non-GAAP checks on drafts; incidents routed to the audit chair within 24 hours.
- Live answers use only published figures and approved Q&A.
- AI output is labelled; no unlicensed likeness or voice of real people.
Attestation and hosting
Report a vulnerability
Use the contact form with the topic "Security". We acknowledge every report and keep you updated until it is resolved.