Skip to content
Create a free account

Your financial life is personal. You deserve to know how we protect it.

Here's how we protect your documents, manage access, and use AI. You'll also find what we're still working on and how to ask us about your data.

Private by default

Documents live in a private vault, encrypted in transit and at rest by our infrastructure providers.

Clear sharing permissions

Access depends on each person's role, current relationship with your household, and the sharing permissions you've granted. Those permissions can be revoked.

Answers you can check

In supported document-review features, X1 links answers to their sources so you can check the work.

A record of key activity

We record key document access and sharing events so we can investigate security questions and incidents.

The questions people ask us first.

Claims reviewed

SOC 2
We're working toward SOC 2 readiness. X1 doesn't currently hold or claim a SOC 2 report or certification.
Data use
We don't sell household data or use it for advertising. Our policy: we don't grant model providers permission to train on your household's content.
For your firm
Ask us about our security controls, the providers that process data for us, and the evidence available under NDA.

You can see the handoff before you approve it.

Access for your household and professionals depends on their current roles, relationships, and sharing permissions. A limited group of authorized X1 staff and service providers may also process data when needed to run and secure X1.

  1. 01

    See what you're sharing

    Before you approve a handoff, you can see what's being prepared, who it's for, and what happens next.

  2. 02

    Review the recipient and documents

    For document sharing, review the selected material and recipient before granting access. Existing grants and connected services follow the permissions you have already authorized.

  3. 03

    Keep the context together

    Review the sharing activity recorded in X1. Keep relevant responses with the documents so you can refer to them later.

Useful answers. Clear limits on data use.

X1 uses commercial AI services through their APIs, not personal chatbot accounts. We don't grant model providers permission to train on household content. We're checking the contract terms and how long providers keep data for each AI workflow.

  • Data-retention terms and settings vary by workflow. Our verification is still in progress; we don't claim one retention period for every AI provider.
  • In supported document-review features, X1 links answers to their sources so you can check the work.
  • Some professional workflows require a person to review the material before it's delivered to a client.
  • Discovery material an advisor provides for a pre-client brief is read once to build the cited draft and isn't stored as source files. The approved brief lives in the firm’s private workspace, and its share links are unlisted and revocable.

See it. Correct it. Ask us to erase it.

Getting a copy of your data, correcting it, deleting content, and removing your login are different requests. We'll explain what each one covers. A verified request to erase your data is separate from ending account access.

Review your privacy rights
Access
Ask what personal information X1 holds about you and how it's used.
Export
Export the parts of your household record available in the app. If you need more, ask us for a fuller copy.
Correct
Correct information that's wrong, including facts X1 has organized from your documents.
Request erasure
Ask us to verify and carry out a request to erase your data. Removing your login or ending account access doesn't, by itself, mean every related record has been erased from every system.

Where we stand on SOC 2.

We're preparing our security and confidentiality controls for SOC 2, with privacy controls being prepared alongside them. We don't currently hold or claim a SOC 2 report or certification.

Need a closer look before your firm signs up?

We can walk through how data moves through X1, who can access it, which providers process it, and how deletion works. Under NDA, we can share what evidence is available and what's still in progress.

Talk to us about security

Ask us how X1 handles your information.

We'll tell you what we can, including which protections depend on our providers and what we're still working on.

Contact X1Privacy policyLog inStart free