Security & Privacy
Your data. Locked down.
How we protect your clients’ data, in plain words.
- Status
- Verified sign-in
In plain terms
Data stays in the client’s database. Only totals come back. Passwords are encrypted. Everyone is walled off.
What we guarantee.
Four promises behind every answer.
- Kept apart
- Each firm and each client sees only its own data.
- Passwords encrypted
- Database passwords are encrypted on entry and never shown again.
- Data stays put
- The maths runs in the client’s database. Only totals come back.
- Numbers you can trace
- The AI never does the arithmetic. Every figure has a record.
Note 1
Note 2
Note 3
Note 4
Sign-in you can trust.
Every request carries a verified sign-in. A missing or invalid one is rejected.
Every request, in order
- 1Sign inYou prove who you are.
- 2VerifyWe check the sign-in is real and current.
- 3MatchWe link you to your firm.
- 4ScopeEvery query is limited to your firm.
- 5Client checkUnknown or foreign clients are rejected.
Honest status.
Sidwell is an early product. Here is where security stands.
In place
- Firm-level access control on all data and chat.
- Encrypted database passwords.
- Sign-in checks on every request.
- A full record behind every answer.
- Clients kept apart inside one firm. Owner-approved invites for teammates.
Hardening ahead
- Stronger sign-in verification in production.
- Moving from sample data to real client workloads.
- An independent security review.
- Per-client permissions. Today, teammates see all of a firm’s clients.


