Security
A short vendor due-diligence summary for advisors and preparers. A longer written information security program is available on request.
| Raw files | Columns other than trade fields are removed in the browser. The rest is processed in memory and never written to disk. |
| Stored data | Computed results only (no names, no account numbers), deleted after 90 days. Access keys, plan and email for paying customers. |
| Transport | HTTPS everywhere (TLS at the edge and on the tunnel to our server); HSTS, nosniff, frame and referrer headers. |
| Server | Single-purpose server account without admin rights; no inbound ports open (outbound tunnel only); dependencies pinned and reviewed monthly. |
| Payments | Stripe Checkout; we hold a read-only restricted key and never see card numbers. |
| Abuse limits | 5 MB per file, 5 files per run, per-network rate limits. |
| Data use | Used only to compute the report (IRC 7216). No resale, no marketing use, no model training. |
| Incidents | Affected customers are notified within 72 hours of discovery of unauthorized access. |
| Backups | Daily backup of the application database (keys and results only) to the owner's computer. |
| Contact | clearwater-c@agentmail.to |