Security

Controls that exist today

• Owner-scoped isolation: every client, meeting, draft, task, and log entry carries your account id, and PostgreSQL row-level security refuses cross-account reads and writes at the database layer — not just in the application.
• Append-only audit trail: workspace activity is written to a log that has no update or delete path, enforced by database policy and triggers. Corrections are additions.
• Frozen approvals: approving a meeting freezes exactly the on-screen text with a SHA-256 checksum recorded in the trail, so what was approved is provable later.
• AI provenance: the drafting model is named on the record, the original AI draft is preserved when you first edit, and transcript passages that look like instructions to the AI are masked and disclosed.
• Transport and at-rest protection: traffic is HTTPS; storage and database encryption at rest are provided by the managed platforms underneath (Supabase infrastructure).
• Rate limiting: per-account, per-operation limits on AI work.

What is not claimed

• No SOC 2, ISO 27001, or similar certification — Advisor OS is pre-release and has not undergone an external audit.
• No compliance certification with any financial regulator's rules; the product gives you evidence and controls, not a certificate.
• No uptime or disaster-recovery commitment yet. Use the per-meeting export to keep your records portable.

Reporting a vulnerability

If you find a security problem, please report it privately: the in-app Feedback button (category: bug), or via github.com/The-Umbrella-Domain. Please do not test against the shared demo with real personal data.