Security

Encryption

• All traffic is encrypted in transit with TLS.
• Data is encrypted at rest in our database and file storage.

Access control

• Row-level security is enforced at the database layer — every record is scoped to the owning account, so your data is structurally invisible to other customers.
• Report exports are stored in private storage and served only through short-lived, self-expiring signed links.
• Client intake links are signed, time-limited tokens scoped to a single engagement.

Payments

All payments are processed by Stripe, a PCI-DSS Level 1 certified provider. Your card details never touch our servers.

Data handling

• Your data is used solely to produce your analysis — never sold or shared.
• Account and data deletion is available on request.

Reporting a concern

If you believe you have found a security issue, email donking@cmgfinancialsolutions.net and we will respond promptly.