Security at Ozzie
Ozzie handles your clients' bank data, so protecting it is part of the design, not an add-on. Here is exactly what we do, in plain English.
Encryption
- In transit: every connection is HTTPS only, and browsers are told never to connect any other way (HSTS).
- At rest, by our hosting provider: Cloudflare encrypts all stored data with AES-256.
- At rest, by us, on top of that: the most sensitive fields (bank transaction descriptions, account names and payroll registers) are encrypted with AES-256-GCM before they're stored. Every company has its own key, so one company's key can never read another company's data.
Isolation and access
- One private database per company. Each client's data lives in its own isolated store, not in a shared table.
- Access is scoped and short-lived. Opening a company issues a 15-minute pass for that one company only.
- Roles. Only owners and admins can create or revoke API keys, and only an owner can delete a company.
- No passwords. You sign in with a passkey (Face ID, Touch ID, Windows Hello) or a one-time email link. Sessions, API keys and invite codes are stored only as one-way hashes.
- Abuse limits on sign-in, the app and the automation API.
Your files stay on your device
- PDF and Excel statements are read in your browser. The file itself is never uploaded; only the transactions found in it are sent.
- Password-protected PDFs are unlocked in your browser. The password is never sent to us.
- PDF statements are checked row by row against their own running balance before anything is saved.
Read-only, and accountable
- Ozzie can't move money. It reads bank data and drafts suggestions; people make every payment.
- Every change is logged in a tamper-evident, hash-chained audit log: imports, category changes, reviews and exports.
- Numbers are calculated, not guessed. Totals, runway and flags come from deterministic calculations, never from an AI model.
AI
When Ozzie's AI is turned on and you chat with it, the figures it needs to answer are sent to Anthropic's API to write the reply. Your statement files are not. Under Anthropic's commercial terms, data sent through its API isn't used to train its models.
Deleting data
An owner can delete a company at any time, from Accounts. That erases every transaction, account, report, payroll register, review and audit record for it, permanently. Export anything you need first: QuickBooks, Xero, and a full CSV are one click away.
Who processes data
- Cloudflare: hosting, storage and sign-in emails.
- Anthropic: AI replies, only when AI is turned on.
What we never do
- Sell or share your data, or use it for advertising.
- Move money or make payments.
- Store passwords, or full bank account numbers from payroll registers (only the last four digits).
- Upload your PDF or Excel statement files.
What we don't have yet
Ozzie is in a private beta. We don't have a SOC 2 report yet. If your firm needs one, or a security questionnaire answered, ask us and we'll tell you where things stand.