Trust centre

How we look after your financial data

This page is maintained by the Analytix Pro team to answer the security and privacy questions finance teams ask before uploading a trial balance. It describes controls that are live in the product today — it is not an independent certification or audit report.

Shared responsibility

The underlying platform (hosting, database, authentication, encryption) is provided by Lovable Cloud. Analytix Pro AI is responsible for how the application uses those services, access control inside the app and the content of this page. You remain responsible for who you invite to your workspace, what data you upload and how you handle exported files.

Access & authentication

  • Email and password sign-in with self-service password reset.
  • Every workspace is isolated; data is scoped to your organisation by row-level security.
  • Role-based access inside the workspace (owner, admin, member) plus finance roles that tailor what each person sees.
  • Uploaded documents live in a private storage bucket — no public URLs.

Platform & hosting

  • Built on Lovable Cloud, which runs the managed Postgres database, authentication and file storage.
  • Application traffic is served over HTTPS (TLS 1.2+); data is encrypted at rest by the platform's managed infrastructure encryption (AES-256 at the disk and object-storage layer). We do not offer customer-managed keys or HSM-backed encryption.
  • Server-side logic runs in an isolated serverless runtime — secrets are never exposed to the browser.

Data collection & use

  • We process the financial files and workspace content you choose to upload, plus account details such as name and email.
  • AI analysis is performed on your uploaded data to produce findings, commentary and reports inside your workspace.
  • Your financial data is not used to train foundation models.

Retention & deletion

  • You can delete individual reports, packs and workspace records at any time from the app.
  • Deleting a record removes it from your workspace, including its stored file where one exists.
  • For a full workspace deletion request, contact us and we will confirm once it is complete.

Why independence matters

Analytix Pro is platform-agnostic: we connect to Xero, QuickBooks, Sage and file uploads, but we do not own any of those platforms. That matters because a review layer owned by the same company that built your ledger has a structural conflict of interest — it is incentivised to keep you satisfied with the platform, not to surface every data-quality problem. Our only incentive is to find the issues you would want an auditor or senior reviewer to see.

Sub-processors

The services Analytix Pro relies on to deliver the product.

ProviderPurpose
Supabase (via Lovable Cloud)Database, authentication and encrypted file storage (EU/UK region)
Lovable Cloud / CloudflareApplication hosting and edge delivery
Google (Gemini) via the Lovable AI GatewayAI analysis, commentary and chat responses, under zero-retention, no-training terms
StripeSubscription billing and card processing
ResendTransactional and notification email (notify.analytixpro.co.uk)
Resend — outreach senderBusiness-development email to prospect contacts, sent from a separate subdomain (mail.analytixpro.co.uk) so it is isolated from customer email
Frankfurter (European Central Bank data)Daily foreign exchange reference rates
Xero, Intuit QuickBooks and SageRead-only accounting data, only where you choose to connect them

Privacy requests

To request a copy of your data, correct it, or have your workspace deleted, email support@analytixpro.co.uk from the address on your account. We will acknowledge the request and confirm when it has been actioned.

Reporting a vulnerability

Found something that looks wrong? Email support@analytixpro.co.uk with steps to reproduce. Please do not test against other customers' workspaces or run destructive testing.

Service availability

We run an automated health check against the application and its API every few minutes and publish the raw result here. This is our own monitoring, not an independently audited figure.

Loading availability data…

Accuracy track record

Every finding we surface can be rated by the customer looking at it. This is the raw result of those ratings over the last 90 days — our own data, not an independently audited figure, and not a guarantee of accuracy on your numbers.

Loading accuracy data…

Compliance status

Analytix Pro does not currently hold SOC 2, ISO 27001 or any other independent certification. If your procurement process needs a security questionnaire, DPA or details of our roadmap, get in touch and we will respond directly rather than pointing you at a badge.

Talk to us about enterprise requirements

Product changelog

2026-07

  • Audit prep pack with ZIP export
  • Slack & Microsoft Teams alerts
  • Guided onboarding

2026-06

  • 13-week AI cash forecast with scenario sliders
  • Multi-currency presentation and FX rates

2026-05

  • Budgeting and variance module
  • Benchmarks
  • Weekly digest and nightly re-scans