Security & Privacy

Your Data is Safe With Us

We handle your financial data with the utmost care. Bank-level encryption, GDPR compliance, and strict AI data policies protect your information.

Enterprise-Grade Security

We use the same security standards as major financial institutions to protect your data.

Bank-Level Encryption

All data is encrypted with AES-256 at rest and TLS 1.3 in transit. The same standards used by major banks.

UK Data Centre (London)

Your data is stored in EU-based data centers (AWS eu-west-2, London) ensuring GDPR compliance and data sovereignty.

Secure Authentication

Industry-standard authentication with secure password hashing, session management, and optional two-factor authentication.

Row-Level Security

Every database query is automatically filtered to ensure you can only access your own company's data.

AI Data Promise

AI That Respects Your Privacy

We use AI to help categorize transactions, extract data from documents, and provide insights. Here's our commitment to you:

1

Never Used for Training

Your financial data is NEVER used to train AI models. Not by us, not by our AI providers.

2

Never Shared with Third Parties

Your data stays between you and AccountsOS. We never sell or share your data with anyone.

3

Processed, Not Stored

When AI processes your documents or transactions, it happens in real-time. We don't keep copies for AI use.

4

Minimum Data Principle

AI only receives the specific data it needs for the task at hand - nothing more.

5

Isolated Processing

All AI operations happen in secure, isolated environments with strict access controls.

Our AI Provider Commitment

Finn runs on Anthropic's Claude (chat) and Google's Gemini API (document and statement extraction), both on paid commercial terms under which your data is never used to train their models. All data is processed in line with GDPR requirements.

Secure Bank Statement Processing

When you upload bank statements, they're processed securely with multiple layers of protection:

  • Encrypted upload

    Files are encrypted during upload and storage using AES-256 encryption.

  • AI processing in isolation

    Statement data is extracted in secure, isolated environments and never stored by AI providers.

  • No third-party sharing

    Your financial data stays between you and AccountsOS. We never share it externally.

  • Delete anytime

    You can delete uploaded documents at any time, and the data is permanently removed.

All UK Banks Supported

Upload PDF or CSV statements from any UK bank. Our AI extracts and categorizes transactions automatically.

Barclays, Revolut, Starling, Monzo, HSBC, Lloyds, and more

GDPR Compliant

Your Rights Under GDPR

As a UK/EU resident, you have specific rights over your personal data. We make it easy to exercise these rights.

Right to Access

Request a copy of all your personal data at any time.

Right to Rectification

Correct any inaccurate personal data we hold about you.

Right to Erasure

Request deletion of your personal data (subject to legal retention requirements).

Right to Portability

Export your data in a machine-readable format.

Right to Object

Object to certain types of processing of your personal data.

Right to Restrict

Request that we limit how we use your personal data.

To exercise any of these rights, contact us at finn@accounts-os.com

Data Retention

We keep your data only as long as necessary.

Active Account

Your data is retained for the duration of your account to provide our services.

Financial Records

7 years retention for financial records as required by HMRC for tax compliance.

After Deletion

Personal data deleted within 30 days of account closure, except where legally required.

Questions About Security?

We're happy to answer any questions about how we protect your data.

Security & Privacy

finn@accounts-os.com

Built for the agent era

AI agents are already finding AccountsOS.

That is not a problem, it is the point. AccountsOS is built AI-native: Finn runs on Claude Sonnet and Gemini, your own AI tools can plug into your books today, and when your business runs on agents, they will talk to Finn directly. You keep the dashboards. The agents get a handshake.

Claude Sonnet

Finn's reasoning. The model accountants already use for advice, running your books.

Gemini

Reads your receipts, statements and contracts. Vision built in.

MCP, live today

Connect Claude to your books now. Ask your own AI about your numbers.

Agent to agent

Your agents can talk to Finn directly. The handshake is already wired.

UK data, London

Your records stay in London. AI calls never train the models.

Every number above is live crawler and assistant traffic. Access to your books is scoped, sensitive actions require approval, and financial totals are computed rather than generated.

Ready to Try Secure, AI-Powered Accounting?

Join founders who trust AccountsOS with their financial data.