Your sales, expenses and tax figures are the most private numbers a business has. This page lists every protection around them, what is never collected in the first place, and what is not yet certified.
Every page is served over HTTPS, and browsers are told to refuse a plain connection for a year. Account and financial data sit in a managed database encrypted at rest, with its backups, on a private network only the application server can reach.
The Terms of Service commit to it, and both AI providers run under commercial terms that exclude training. They never receive your email address or password, and your tax is computed by our own software, not by a model.
When the software checks market prices on the public web, any query carrying your business name, your name or one of your figures is dropped before it is sent.
Sign in with Google or LinkedIn, or with a password locked after repeated failed attempts. Sign-up is bot-checked, and a session on financial pages signs out after a short idle period.
Every action on your account is recorded and shown to you in your activity history. Errors are monitored with secrets masked, uptime and certificates are checked from outside, and dependencies are scanned for known vulnerabilities.
Export everything as a file or delete the account outright, from your own settings, with no request to make. Deletion removes your data for good.
The surest protection is not holding the data at all. The tools work from amounts and categories, so none of the following is ever asked for:
Uploaded spreadsheets are read as they are, so a file that carries a customer's name does pass that name to the software and its AI providers. Remove columns you would not share before uploading.
Occam's Model is a small company in the United States, and has not yet been through a SOC 2 audit. Rather than borrow a badge, this page publishes exactly what is done and what is not collected, and any security question gets a direct answer from the people who built the software.