Security and data
Your clients' records, kept in Canada.
What we do with data, where it lives and what stays your decision. We only list what is true today.
The basics
- Hosted in MontréalClient data is stored in Canada.
- No bank passwordsYou upload statements. We never ask for bank sign-in details.
- You approve postingsSuggestions wait for review. Nothing is quietly changed or deleted.
- Roles per personDecide who can see and do what.
What we hold, and why
| What | Why we hold it | Who can see it |
|---|---|---|
| Your sign-in details | To let you in | You |
| Client records you enter | To do the work you ask for | Your firm, by role |
| Documents you upload | To read them and keep them as evidence | Your firm, by role |
| Waitlist email and product interests | To tell you when access opens | oh my hq only |
The waitlist
Even the sign-up form is locked down.
You confirm your address by email before you are on the list. Confirmation links expire after seven days, and every email has an unsubscribe link.
How it works
- Confirm by email before you are added
- The link expires after seven days
- Unconfirmed sign-ups are cleaned up
- The database refuses all direct access from browsers
What we do not claim.
We hold no security certifications today. When we do, they will be listed here with their dates. The products do not give legal, tax or insurance advice.
Questions
Where is my data stored?
In Canada, in Montréal.
Do you connect to my bank?
No. You upload statements, so we never hold bank passwords.
How do I report a security concern?
Write to info@ohmyhq.com.