Trust Center

Building Trust Through Transparency, Security & Responsible AI

At Fintellect AI, trust is foundational to everything we build.
As a decision intelligence platform operating at the intersection of finance and artificial intelligence, we recognize that data protection, system integrity, and responsible AI governance are not optional — they are essential.

This Trust Center outlines how we protect client data, secure our infrastructure, and align with internationally recognized standards as we scale.

Our Trust Principles

We operate under the following core principles:

Security by Design – Data protection is embedded into our platform architecture from the beginning.

AI as Decision Support – Our system assists financial professionals; it does not replace human judgment.

Transparency Over Opacity – We communicate clearly how data is processed and safeguarded.

Continuous Improvement – Security is an evolving process, not a one-time certification.

Infrastructure and Architecture

Fintellect AI operates a segregated architecture model:

• Public marketing website (fintellectai.com) hosted on managed Website Builder infrastructure
• Application environment (aicfo.fintellectai.com) hosted on a dedicated managed cloud infrastructure (Render, AWS-based) within the European Union

Customer financial data is processed and stored exclusively within the application environment and not within the public marketing website.

The application environment includes:

• Managed PostgreSQL database
• Persistent encrypted storage
• Automated encrypted backups
• TLS encryption for all data in transit

Data at rest is encrypted at the infrastructure level.

Infrastructure Providers

We leverage enterprise-grade infrastructure providers that maintain internationally recognized certifications such as:

• ISO/IEC 27001
• SOC 2 Type II

Our hosting providers operate under audited security programs and industry best practices.

Data Protection & GDPR

Fintellect AI operates under a GDPR-aligned framework.

We distinguish clearly between:

• Data Controller responsibilities (website visitors, account data)
• Data Processor responsibilities (client-uploaded financial data within the application environment)

Our framework includes:

• Data Processing Agreements (DPA) with clients
• Sub-processor transparency
• Data minimization principles
• Lawful processing under Article 6 GDPR
• Technical and organizational safeguards
• EU-based primary data hosting

We retain data only for as long as necessary to provide our services and comply with legal obligations.

AI Governance & Responsible Use

Fintellect AI is designed as a financial decision-support platform.

We apply the following AI governance principles:

• No fully automated legally binding decisions
• Human-in-the-loop oversight
• Clear separation between analytical outputs and executive decision-making
• No client data used for AI model training
• Transparent AI-assisted insights

AI processing is performed using enterprise-level AI services (ChatGPT Business).
Client data is not used to train AI models.

Our goal is to enhance professional judgment — not automate responsibility.

Security Controls & Operational Safeguards

We maintain documented internal security controls and operational procedures, including:

• Encryption in transit (TLS)
• Infrastructure-level encryption at rest
• Role-based access controls (RBAC)
• Restricted administrative access
• Secure API integrations
• Sub-processor due diligence
• Incident response procedures
• Automated backups
• Continuous monitoring and risk assessment

Security practices are aligned with internationally recognized standards, including ISO 27001 principles.

Payment Security

Payment transactions are securely processed via PCI DSS-certified third-party providers. Fintellect AI does not store or process cardholder data.

Incident Management & Reporting

Fintellect AI maintains documented incident response procedures.

In the unlikely event of a security incident, we:

• Investigate promptly
• Contain and remediate
• Notify affected parties where legally required
• Implement corrective controls

We support responsible vulnerability disclosure.

Standards Alignment & Roadmap

Fintellect AI aligns its internal security framework with ISO 27001 principles and maintain a structured roadmap toward formal certification as the company scales.

As we grow and engage with larger enterprise clients, we will continue to strengthen our governance, documentation, and compliance posture.

Contact & Security Inquiries

For security, compliance, or data protection inquiries:

contact@fintellectai.com

We are committed to transparency and welcome responsible disclosure.