Security & Privacy

Your data, handled the way I handle my own

I'm not a startup that raised money and decided financial planning looked like a big market. I'm a CFO who built ClearAxis CFO to manage my own net worth — my brokerage accounts, my rentals, my tax return. Your data sits in the same system mine does, under the same protections. I had every reason to get this right before I ever showed it to anyone else. Here's exactly how your information is protected — in plain English, no hand-waving.

Isolated from every other user — at the database level

Every record you create is tied to your account and walled off by PostgreSQL Row-Level Security. The app connects through a restricted role that cannot override those walls — so isolation is enforced by the database itself, not just by application code that could have a bug. A query that ever forgot to filter would return nothing, never someone else's data.

Strong authentication, with two-factor available

Sign-in uses per-user tokens. You can turn on app-based two-factor (TOTP), and sensitive actions require you to re-verify. A stolen laptop or an abandoned session can't quietly do damage.

Encrypted in transit and at rest

Your data is encrypted on the wire (TLS) and encrypted where it's stored. Table stakes — but worth stating plainly.

Your linked accounts are read-only

When you connect a bank or brokerage, ClearAxis CFO receives read-only access — enough to see balances and holdings, nothing more. There is no ability to move money, trade, or withdraw. It models your money; it never touches it.

The AI only ever sees what it needs

AI is used only to explain results in plain English — the actual math happens in code, not in a language model. The data sent for those explanations is stripped of identifying information first: no account numbers, no SSNs, no raw transaction descriptions. It is never used to train any AI model.

Export or delete everything, anytime

One click exports a full archive of your data as standard CSV files. A self-service delete permanently removes your account and all associated data, confirmed with your password and your two-factor. It's your data — you're never locked in.

No lock-in

Your data is always yours to take

Export it, delete it, or walk away anytime — it's your information, and you're never trapped. Not a promise; it's structural.

You can leave with your data

One click gives you a full archive of everything as standard CSV files. It's yours; you can walk out with it anytime.

You can delete it all

A self-service delete permanently removes your account and data — confirmed with your password and two-factor, then gone for good.

Not a cash-burning land-grab

This is a focused product with low costs that I use every day for my own finances. I'm not going anywhere — and even if I did, you'd never lose access to your own information.

Correctness

The math is right because correctness is the entire point

The tax engine — IRMAA, RMDs, Roth conversions, 1031 exchanges, passive-loss treatment — is built directly from and cross-checked against IRS and SSA primary sources. This is the part most tools get wrong or don't attempt at all. A wrong number here costs you real money, so it's the part I obsess over.