What we can honestly claim, and what we can't yet

Cross-tenant isolation is enforced and was live-verified

Access to another tenant's data is fail-closed by construction: a request for a foreign tenant's target gets the same response shape whether that target exists or not. A live cross-tenant probe found no leak.

Tenancy is server-derived, not client-selected

Which company's data a request can touch is decided from the authenticated session on the server. Client input is never trusted to select the tenant.

Denials are evidence-backed

Access denials are written to an append-only denial ledger, so a refused request leaves a durable record rather than disappearing silently.

Every signal traces to a sourced methodology

Each signal's threshold cites a published methodology. A fabricated-citation guard and a constants audit run in CI to keep that sourcing honest as new signals ship.

The engine is re-verified nightly, independently

An independent, fail-closed verifier re-runs the engine every night. The current run's status is public at /proof, with figures derived from committed artifacts anyone can recompute.

Ingestion is read-only

Connecting QuickBooks Online uses an OAuth authorization that we access on a read-only basis; we do not write to your QuickBooks data. CSV upload is a user-initiated action, not a background pull.

What we claim

• App-layer tenant isolation, live-verified with a cross-tenant probe
• An independent, fail-closed engine re-verification, every night
• 48 deterministic financial signals, each tracing to a sourced methodology

What we do not claim

• No claim about what a model provider does with your data beyond generating your brief
• No promise about how long any data is kept or when it is removed
• No claim that isolation happens at the database layer; the isolation described above is enforced in the application layer
• No outside body has reviewed or backed this page; these six items are self-reported and independently checkable, not sealed by a third party
• No implication that any given company's signals all apply; which ones fire depends on that business