Private by default
Documents live in a private vault, encrypted in transit and at rest by our infrastructure providers.
Your financial life is personal. You deserve to know how we protect it.
Here's how we protect your documents, manage access, and use AI. You'll also find what we're still working on and how to ask us about your data.
Clear sharing permissions
Access depends on each person's role, current relationship with your household, and the sharing permissions you've granted. Those permissions can be revoked.
Answers you can check
In supported document-review features, X1 links answers to their sources so you can check the work.
A record of key activity
We record key document access and sharing events so we can investigate security questions and incidents.
Five straight answers.
These five answers were checked against the code and the live privacy policy on . Where we can't make a promise yet, we say that instead.
- Who can see my documents?
- The people you share them with, at the level you set, for as long as the share stands. Staff access exists: a small number of X1 staff hold an internal admin role that can open a member's record for support, product quality review and security. Key staff reads are recorded privately. Your files are encrypted in transit and at rest by our infrastructure providers, not with a key only you hold, so the people who operate the database and storage could technically reach contents. We don't claim otherwise.
- Which providers process them?
- Supabase stores the primary files and the record. Microsoft Azure Blob Storage holds separate recovery copies of eligible Vault documents. Some routes aren't covered yet, including files imported from Google Drive, Dropbox or Box, and we are still verifying sustained daily operation. Google Cloud does OCR and extraction. Azure OpenAI, Anthropic, and Google models through Vertex AI read selected context to answer questions and review documents. Some workflows, including document filing, estate review and pitch-deck analysis, send the original file to the model. Vercel hosts the app. PostHog and Sentry see diagnostics with household content masked. How AI providers handle your data: privacy policy, section 7.
- Is my data used to train models?
- No. X1 doesn't train models on member data and has no pipeline to. We don't grant model providers permission to train on it, and we use their commercial APIs, not consumer accounts. Azure's abuse monitoring can retain flagged content for human review; that is theirs, and we say so.
- Can I delete everything?
- Delete supported documents yourself. A trashed Vault document leaves the active view and its shares are revoked. Permanent deletion is normally scheduled after 30 days, subject to required deletion checks. For the whole account, submit an erasure request in Settings, Connections, or write to hello@x1wealth.com. We review your identity, the request's scope and any retention exceptions, and explain what can be deleted or must be retained. We can't yet state when erased data leaves backups, so we don't.
- Can I take it all with me?
- Export your original documents and the records available in X1 without contacting support: documents as ZIP files, your record and learning record as JSON, household knowledge as Markdown, the ledger as PDF. Each export explains what it includes. If X1 ever stops operating, we'll give you at least 90 days' notice, and export stays available the whole time.
The questions people ask us first.
Claims reviewed . Covers the three statements in this panel.
- SOC 2
- SOC 2 Type 2 is in progress. X1 doesn't currently hold or claim a SOC 2 report or certification. Our trust center (opens in a new tab) lists the controls currently passing in our compliance platform.
- Data use
- We don't sell household data or use it for advertising. Our policy: we don't grant model providers permission to train on your household's content.
- For your firm
- Ask us about our security controls, the providers that process data for us, and the evidence available under NDA.
You can see the handoff before you approve it.
Access for your household and professionals depends on their current roles, relationships, and sharing permissions. A limited group of authorized X1 staff and service providers may also process data when needed to run and secure X1.
- 01
See what you're sharing
Before you approve a handoff, you can see what's being prepared, who it's for, and what happens next.
- 02
Review the recipient and documents
For document sharing, review the selected material and recipient before granting access. Existing grants and connected services follow the permissions you have already authorized.
- 03
Keep the context together
Review the sharing activity recorded in X1. Keep relevant responses with the documents so you can refer to them later.
Useful answers. Clear limits on data use.
X1 uses commercial AI services through their APIs, not personal chatbot accounts. We don't grant model providers permission to train on household content. We're checking the contract terms and how long providers keep data for each AI workflow.
- Data-retention terms and settings vary by workflow. Our verification is still in progress; we don't claim one retention period for every AI provider.
- In supported document-review features, X1 links answers to their sources so you can check the work.
- Some professional workflows require a person to review the material before it's delivered to a client.
- Discovery material an advisor provides for a pre-client brief is read once to build the cited draft and isn't stored as source files. The approved brief lives in the firm’s private workspace, and its share links are unlisted and revocable.
See it. Correct it. Ask us to erase it.
Getting a copy of your data, correcting it, deleting content, and removing your login are different requests. We'll explain what each one covers. A verified request to erase your data is separate from ending account access.
Review your privacy rights- Access
- Ask what personal information X1 holds about you and how it's used.
- Export
- Export the parts of your household record available in the app. If you need more, ask us for a fuller copy.
- Correct
- Correct information that's wrong, including facts X1 has organized from your documents.
- Request erasure
- Ask us to verify and carry out a request to erase your data. Removing your login or ending account access doesn't, by itself, mean every related record has been erased from every system.
Where we stand on SOC 2.
SOC 2 Type 2 is in progress. Our agreement with Oneleet includes an independent SOC 2 audit, and we're preparing our security and confidentiality controls, with privacy controls alongside them, before the observation period begins. We don't currently hold or claim a SOC 2 report or certification.
Our trust center lists our security policies and the controls currently passing in the compliance platform we use to track them.
View our trust center (opens in a new tab)Need a closer look before your firm signs up?
We can walk through how data moves through X1, who can access it, which providers process it, and how deletion works. Under NDA, we can share what evidence is available and what's still in progress.
Talk to us about securityAsk us how X1 handles your information.
We'll tell you what we can, including which protections depend on our providers and what we're still working on.