AI redaction and data sovereignty

You run this app in your own environment; your financial data never leaves it and we never hold it. Records are append-only and effective-dated, so a correction is a new timestamped fact, not an overwrite.

Where the app uses AI to narrate or interpret, sensitive values are redacted before anything is sent, and the deterministic math (balances, variance, escalation) runs in code, not in a model. The model reasons about what to compute and explains results; it never sees raw amounts it does not need.

In-app documentation, version 1. Generated from the product documentation source, so this matches the app exactly.