How we protect your close data and respect your privacy.
Every workspace is isolated at the database level. Row-level security policies prevent any cross-tenant reads or writes, even through the API or MCP tools.
Self-approval is blocked by a database trigger when segregation is enabled. The LLM and MCP tools cannot bypass this rule. Reviewer approval is always a human action.
We do not use analytics, tracking pixels, or advertising cookies. No cookie banner is needed because we do not track you.
Your data is stored in a Supabase Postgres database hosted in the EU. File attachments are stored in private, workspace-scoped storage buckets. We never send your workspace content to an external AI model without explicit opt-in.
The application is hosted on Bolt/Netlify infrastructure. The database is powered by Bolt Database (Supabase). Transactional email is sent via SendGrid.
Transactional emails (reminders, invitations, digests) are sent through SendGrid. Each email is recorded in an outbox with an idempotency key, so a retried job never sends twice.
Found a security issue? Please email us at team@thefinancelead.com. We respond within 48 hours.