Security & data
An honest overview for security, compliance, and internal audit — no implied certifications or customer claims.
Trust center — controls and live checksHow decisions are made
FinanceAI agents run deterministic rules first — match tolerances, transposition checks, UBO percentage math, screening score thresholds, and flux materiality gates.
Every agent run writes a step-by-step trace with the evidence it used: bank amounts, wire references, owner percentages, and GL account IDs.
People stay in control. Journals, KYC dispositions, and close sign-offs require explicit approval; agents prepare the packet, not the final signature.
Your data in the document trial
The public trial is for dummy or anonymized documents only — sample bank statements, KYC packs, or trial balances you are comfortable testing with.
When you register we store your name, email, company, the document text you submit, and the agent results to operate the trial and follow up if you request a demo.
Request deletion at any time: email contact@stellitron.com from the address you used to register and we will remove your trial record.
Data in a pilot or production
Enterprise pilots are scoped with your security and finance teams. Typical options we configure together:
- Run FinanceAI in your cloud account or VPC so documents and ledger extracts stay in infrastructure you control.
- Sign in through your identity provider (SAML/OIDC SSO) and map roles to who can run agents, approve journals, or export audit data.
- Keep data in your chosen region and set retention windows that match your records policy.
- Execute a data processing agreement (DPA) when your legal team requires one — available for pilots and enterprise agreements.
Stellitron Intelligence governance
Optional intelligence calls enrich extraction or drafted narrative; API terms from providers used in your deployment state that submitted content is not used to train their models.
The rules path still runs if intelligence is off or unavailable — matching, screening thresholds, and flux gates do not depend on it.
Your security team receives data flows and subprocessors during the pilot for vendor review.
Access & audit
The public demo uses synthetic Aster Bank data. In pilot tenants, role-based access limits who can view customers, journals, and agent traces.
The activity log records agent runs, approvals, and status changes with timestamps and links back to underlying records.
In pilots, the audit trail can be exported for internal controls or external review.
Integrations
FinanceAI sits alongside core banking, ERP/GL, and file-based bank feeds you already run.
Connectors are built and tested during pilots — they are not sold as a fixed catalog of certified plugins.
We document what syncs, how often, and what stays read-only until your team signs off.
Questions
Is FinanceAI SOC 2 certified?
No independent audit has been completed. SOC 2 Type I is in preparation — see the Trust center for controls in place today and live checks you can verify.
Where does my trial document go?
Document text and agent output are stored to operate the trial. Use dummy data; do not upload live customer PII or production ledgers without a signed pilot agreement.
Can we keep all data inside our cloud?
Yes — that is a common pilot setup. We deploy into your account or a dedicated environment you own.
Who can see agent traces and approvals?
Only users with roles you assign. The demo is open with synthetic data; pilots mirror your org chart through SSO groups.
How do we start a security review?
Request a demo and note you need a security packet. We walk through architecture, data flows, and integration scope, then share written materials for reviewers.