AICFO handles invoices, vendor data, and bank instructions. We treat that data with the same controls a fintech does.
Email + scrypt-hashed passwords, Microsoft 365 SSO, TOTP 2FA. Sessions are HMAC-signed cookies with 14-day TTL.
Five-tier role model — Employee → Manager → Finance Head → CFO → CEO. Settings, integrations, and destructive operations gated to Finance Head or higher.
Every agent action is logged and hash-chained. Tamper-evident — /audit/verify walks the entire chain in seconds.
TLS 1.3 in transit. AES-256 at rest for receipts and database. KMS-managed envelope encryption (production). BYOK on Scale plan.
Indian customers: ap-south-1 (Mumbai). EU customers: eu-west-1 (Ireland). US customers: us-east-1 (Virginia).
DPDPA-compliant (India). GDPR-ready (EU). CCPA (US). DPO designated. Data Processing Agreement available.
All third-party providers (Anthropic, Microsoft Graph, Twilio, WATI, Postmark, Zoho) are enterprise-grade SaaS with their own SOC 2 / ISO 27001 attestations.
Annual CERT-In empanelled pen test. Findings remediated and re-tested before next audit cycle.
Daily encrypted database backups. RTO 4h, RPO 1h. Monthly restore drills.
Receipts sent to Claude are NOT used to train any model (Anthropic API zero-retention by default). Per-tenant LLM cost caps prevent runaway exposure.