Security is not only about encryption. It is also about who is allowed to approve what. Agents prepare; your accountants approve anything that goes to a client or a tax authority. We write those approval points into the blueprint with you, so each workflow has a named person responsible at every sensitive step. The guardrails are specific. An agent can be told which topics to hand to a person, which data it may read and which actions need approval. These settings can be changed as your policy changes.
A fair review of any AI vendor asks about the same few things. We are happy to go through them with your team. Keep the answers on file, as they are useful for your own records. If you hold a security policy, bring that as well.
The page describes our practices: isolated client data, encryption in transit and at rest, role-based access, audit logs and retention that follows your policy. It does not claim any external certification, and it is not a substitute for your own due diligence. For larger engagements, the custom plan includes a security and compliance review. Bring your own security questionnaire to the discovery call, and we will answer it against how your agents are designed.
No. The agents prepare work for your qualified team. They don’t give regulated financial or tax advice to clients.