Security
Last updated: September 2026
Where your data lives
FinoPilo runs on managed cloud infrastructure (Supabase, built on top of AWS). Data is encrypted in transit over HTTPS/TLS between your browser and our servers, and encrypted at rest by our infrastructure provider.
Firm-level separation
Every firm's data is scoped at the database level — access rules are enforced so a query for one firm's records cannot return another firm's data, even accidentally. If you belong to more than one firm, you only see the ones you're actually a member of.
Access within your team
Team members are added individually, with role-based permissions controlling what each person can see and do. You can review and change these permissions from within Flow's Users & Permissions section at any time.
Authentication
Login and account authentication are handled through our infrastructure provider's authentication system, not built or stored by us directly.
Backups
Our infrastructure provider performs automated backups as part of the underlying hosting service. If you need a specific export of your own data, contact us and we'll help directly.
Reporting a security issue
If you find a vulnerability or have a security concern, email hello@finopilo.com — we'll respond directly, not through a queue.