Trust & Security

Every claim backed by something we shipped.

Finance and audit teams buy trust before features. So here's how trust is built into the product — not promised in a brochure.

The credibility hook

AI never does the math.

Every sum, match, FX conversion and difference is computed by deterministic, auditable code. The AI only classifies, explains and drafts — and a named human makes the call. That line is the whole reason a conservative finance team, and their auditor, can trust an AI-assisted tool.

01Code computesEvery figure, by auditable rules
02AI explainsClassifies, drafts, recommends — never calculates
03A human confirmsNamed, timestamped, on the record

Privacy and isolation, enforced.

Your data trains no one's AI

AI features run under commercial API terms: your inputs and outputs are never used to train the provider's models. A plain-language data one-pager is available on request.

EU data residency & GDPR

Your data lives in the EU (Ireland today; Frankfurt planned), handled GDPR-compliantly. Data residency isn't a bolt-on — it's the default.

Isolation enforced by the database

Every tenant is walled off by row-level security in the database itself — not just application logic. Your data can't leak to another workspace even if the app is wrong.

Everything that happens is on the record.

Complete audit trail

Every submission, match decision, sign-off and revoke, confirmation, and config or access change — named, timestamped and filterable. Nothing happens anonymously.

Signed evidence + audit pack

Locked counterparty confirmations with real signatories, sealed into an audit pack — the deliverable your auditor actually asks for at year-end.

Continuous integrity

If a signed figure changes in the books after sign-off, Summatiq flags the drift against the sent snapshot — a control that, on paper, only an auditor might catch months later.

A B2B finance sale has many gatekeepers. Each one gets an answer.

The bookkeeper

The figures match their own books, and the math is never a black box they have to defend.

The group controller

A full exception view and an audit trail that stands up — their asset is the evidence, and it's all here.

The IT security officer

Tenant isolation enforced in the database, EU hosting, no data leaving the region by default.

The GDPR / compliance officer

EU residency, data that never trains anyone's AI, and a Data Processing Agreement on request.

The auditor

Signed confirmations, a sealed audit pack, and drift alerts — evidence they can take away, not a screenshot.

The CFO

No integration project to fund, a predictable cost, and a control environment that gets stronger, not looser.

Need the paperwork?

The AI-data one-pager and a Data Processing Agreement are available for pilots on request — just email us and we'll send them over.

Put it in front of the people who have to sign off.

A short walkthrough — bring your security, GDPR and audit questions.