Private by default
Documents live in a private vault, encrypted in transit and at rest by our infrastructure providers.
Trust & security
Your financial life is personal. You deserve to know how we protect it.
Here's how we protect your documents, manage access, and use AI. You'll also find what we're still working on and how to ask us about your data.
Clear sharing permissions
Access depends on each person's role, current relationship with your household, and the sharing permissions you've granted. Those permissions can be revoked.
Source-backed AI
In supported document-review features, X1 links answers to their sources so you can check the work.
A record of key activity
We record key document access and sharing events so we can investigate security questions and incidents.
At a glance
The questions people ask us first.
Claims reviewed
- SOC 2
- We're working toward SOC 2 readiness. X1 doesn't currently hold or claim a SOC 2 report or certification.
- Data use
- We don't sell household data or use it for advertising. Our policy: we don't grant model providers permission to train on your household's content.
- For your firm
- Ask us about our security controls, the providers that process data for us, and the evidence available under NDA.
Before anything leaves your household
You can see the handoff before you approve it.
Access for your household and professionals depends on their current roles, relationships, and sharing permissions. A limited group of authorized X1 staff and service providers may also process data when needed to run and secure X1.
- 01
See what you're sharing
Before you approve a handoff, you can see what's being prepared, who it's for, and what happens next.
- 02
Approve the handoff
Nothing is sent until your household approves the material and who will receive it.
- 03
Keep the context together
The handoff, the response, and what was confirmed stay connected to the source documents.
How AI uses your data
Useful answers. Clear limits on data use.
X1 uses commercial AI services through their APIs, not personal chatbot accounts. We don't grant model providers permission to train on household content. We're checking the contract terms and how long providers keep data for each AI workflow.
- Data-retention terms and settings vary by workflow. Our verification is still in progress; we don't claim one retention period for every AI provider.
- In supported document-review features, X1 links answers to their sources so you can check the work.
- Some professional workflows require a person to review the material before it's delivered to a client.
- Discovery material an advisor provides for a pre-client brief is read once to build the cited draft and isn't stored as source files. The approved brief lives in the firm’s private workspace, and its share links are unlisted and revocable.
Your data choices
See it. Correct it. Ask us to erase it.
Getting a copy of your data, correcting it, deleting content, and removing your login are different requests. We'll explain what each one covers. A verified request to erase your data is separate from ending account access.
Review your privacy rights- Access
- Ask what personal information X1 holds about you and how it's used.
- Export
- Export the parts of your household record available in the app. If you need more, ask us for a fuller copy.
- Correct
- Correct information that's wrong, including facts X1 has organized from your documents.
- Request erasure
- Ask us to verify and carry out a request to erase your data. Removing your login or ending account access doesn't, by itself, mean every related record has been erased from every system.
Our progress
Where we stand on SOC 2.
We're preparing our security and confidentiality controls for SOC 2, with privacy controls being prepared alongside them. We don't currently hold or claim a SOC 2 report or certification.
For firms and advisers
Need a closer look before your firm signs up?
We can walk through how data moves through X1, who can access it, which providers process it, and how deletion works. Under NDA, we can share what evidence is available and what's still in progress.
Talk to us about securityStill have a question?
Ask us how X1 handles your information.
We'll tell you what we can, including which protections depend on our providers and what we're still working on.
