Security / Security FAQ
Security FAQ
The direct questions to ask before handing over your books. Each answer names the mechanism behind it and links to the page that sets it out in full.
Can the AI change anything in our books or our database?
No. The connection to your accounting system is read-only, enforced at three independent points. Inside Clarity the AI reaches data through read tools only, under a login granted read access and nothing more. There is no write path for it to use.
Are the dashboard numbers generated by an AI?
No. Every figure is produced by fixed SQL over your data. The same inputs always give the same figure, and no model sits in that calculation. The AI reads finished numbers; it does not write them.
Where does our data live?
Client data is hosted in the EU (Frankfurt). The database, the dashboard, and the AI connection run in the same region.
Is our data mixed with other clients?
No. Each client deployment has its own database and its own web server. The separation is at the infrastructure level, not a filter in a shared store.
How do you stop someone unauthorised from logging in?
Sign-in goes through a managed identity provider with passwordless email codes. Every token is cryptographically verified, and access is restricted to an explicit allowlist that denies by default. If no allowlist is configured the system refuses to start.
The demo connects with no login. Is that true of our deployment too?
No. The public demo is open on purpose and holds only the fictional Spark Digital company. A real client deployment is private and behind a login, with the controls described on the access page.
Do you reconcile the numbers against our accounts?
We reconcile revenue month by month against your accounting system’s own P&L report, and show the result. We do not claim a full profit reconciliation; for profit the dashboard reads your accounting system’s own report, because the transaction-level view omits payroll, accruals, and journal-only entries.
Can an unfinished month make our business look like it crashed?
No. Partial months are held back by default. A month is only released once it is confirmed closed, so costs booked ahead of revenue cannot distort the picture.
What happens if we revoke access?
Syncing stops. The dashboard keeps working on the data it already holds, and nothing new comes in until you reconnect. Revoking does not delete what is already there.
Can we take our data and leave?
Yes. The database is standard PostgreSQL and you can take a full export in a standard format, or take over the hosting account. There is no proprietary format holding your data.
Are you certified: SOC 2, ISO 27001, a pen test?
Not at present. We say so rather than imply otherwise. The basis for trust is an inspectable pipeline and gates that fail closed.
How is this meant to fit POPIA and FSCA?
You are the responsible party; Clarity acts as your operator. Data-subject rights map to mechanisms the system can perform, and the design supports FSCA oversight through inspectable SQL, logging, and an AI that recommends rather than acts. We say designed to support, not compliant.
Who are your sub-processors?
Render for hosting, Anthropic for the AI analyst, Auth0 for authentication, and Resend for delivering one-time email codes.