Built for financial professionals who demand high standards of data protection and regulatory awareness.
Multi-layered security architecture designed to protect your data at every level
All data transmitted between your browser and our servers is encrypted using TLS 1.2 or later, an industry-standard encryption protocol.
Our infrastructure runs on Google Cloud Platform, which independently maintains SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, and CSA STAR compliance programs. finsay itself has not yet completed an independent SOC 2 assessment; that's on our post-launch roadmap.
All stored data is encrypted using AES-256 encryption, protecting your information even in the unlikely event of unauthorized access.
We collect only the minimum data necessary to provide our services and never sell it. It is processed only by the service providers that run the platform: hosting and database (Google Cloud and Firebase), AI responses (Google Gemini via Vertex AI), payments (Stripe), email (Google Workspace), error monitoring (Sentry), product analytics (PostHog and Google Analytics) and, if you turn on notifications, your browser’s push service.
Independent third-party penetration testing and a SOC 2 Type II assessment are planned post-launch. Until then, we rely on Google Cloud Platform's independently-assessed infrastructure plus our own internal review process for code changes touching auth, payments, and customer data.
Role-based access control (RBAC) ensures that only authorized personnel can access sensitive systems and data.
Built for the regulatory context financial advisors operate in
California Consumer Privacy Act
California residents can exercise CCPA rights including the right to know, delete, and opt-out of any sale of personal information. finsay does not sell personal information.
Curriculum and tooling designed for the regulatory context our users operate in
finsay itself is not a regulated entity under SEC or FINRA rules. Our curriculum, Aria assistant, and activity logs are designed to help your regulated firm meet your own supervisory, recordkeeping, and disclosure obligations.
Our AI features are designed to support, not replace, your professional judgment
Our AI features are designed with financial industry compliance in mind
Measures to ensure educational content accuracy
What is logged today, and what is on the roadmap
finsay is an educational platform for learning about AI tools and prompt engineering. The AI assistant and learning content do not constitute financial, investment, legal, or regulatory advice. All AI-assisted outputs should be reviewed by qualified professionals before use in client communications. Financial advisors are responsible for ensuring compliance with their firm's policies and applicable regulations.
finsay runs on Google Cloud Platform and inherits the security posture of GCP's independently-assessed infrastructure. These programs are held by Google Cloud, not by finsay. finsay is built to the security standards financial advisory firms expect.
* All of the programs above are maintained by Google Cloud Platform and apply to GCP infrastructure. finsay does not independently hold these.
HIPAA: finsay isn't designed for protected health information (PHI). Please don't enter PHI.View GCP Compliance
Transparency in how we handle your information
finsay is built on Google Cloud Platform, the same infrastructure relied on across regulated industries worldwide — designed for the security standards RIAs and advisory firms expect.
Reliable access to your learning materials, backed by GCP's service level agreement
Firebase Hosting CDN, with TLS 1.2+ end to end
Point-in-time recovery (7-day window) and scheduled backups retained for 14 days, on Google Cloud.
Held by GCP, inherited by finsay through hosting
These programs apply to Google Cloud Platform infrastructure, not to finsay's own entity.
We're available to answer questions about our practices, provide additional documentation, or discuss your organization's specific requirements.