Compliance

Last updated June 10, 2026

Acceptable Use Policy (AUP)

Personnel Finance AI is a financial-services platform designed for lawful business use. By accessing the Service you agree to use it only in ways that are legal, ethical, and consistent with these guidelines. This AUP is incorporated by reference into the Terms of Use.

Permitted Uses

  • Managing your business or personal finances through connected bank and brokerage accounts.
  • Generating financial reports, P&L statements, and tax summaries for your own records.
  • Running automated trading bots (within your own brokerage account) using the built-in strategies.
  • Sharing selected financial screens with your assigned CPA for advisory purposes.
  • Uploading receipts, invoices, and documents for record-keeping and tax preparation.
  • Using the AI chat assistant to analyze your own financial data and get general guidance.

Prohibited Conduct

The following activities are strictly prohibited and may result in immediate account suspension, termination, and referral to law enforcement or regulatory authorities:

  • Financial fraud. Uploading fabricated, falsified, or manipulated financial data to produce misleading reports, deceive lenders, investors, tax authorities, or any other third party.
  • Market manipulation. Using automated trading bots to engage in spoofing, layering, wash trading, front-running, or any activity that violates applicable securities laws, exchange rules, or FINRA/SEC regulations.
  • Money laundering & sanctions evasion. Using the Service to process, conceal, or transfer proceeds of crime, or to evade sanctions administered by OFAC, FinCEN, or any equivalent authority.
  • Unauthorized access. Attempting to probe, scan, or test the vulnerability of the Service; accessing accounts you do not own; reverse-engineering proprietary algorithms, AI models, or source code.
  • Credential sharing. Sharing login credentials, API keys, or session tokens with unauthorized parties; reselling or sublicensing access to the Service.
  • Scraping & bulk extraction.Using automated scripts, bots, or scrapers to extract data beyond authorized API access; harvesting other users' data.
  • Professional re-distribution of AI output. Presenting AI-generated analysis as independently prepared professional financial, legal, or tax advice to third parties without appropriate disclosure and professional oversight.
  • Abusive content. Submitting content that is harassing, defamatory, obscene, or that violates any third-party intellectual property or privacy right.

Enforcement

Violations of this AUP may result in warning, feature restriction, account suspension, or permanent termination at our sole discretion. We reserve the right to report suspected illegal activity to appropriate law enforcement or regulatory bodies and to cooperate fully with any resulting investigation.

Security & Data Protection

We implement industry-standard controls to protect your data at rest and in transit:

  • Encryption in transit. All connections to the Service use TLS 1.2 or higher. Railway-hosted services enforce TLS termination at the edge.
  • Encryption at rest. Brokerage API credentials are stored using AES-256-GCM with server-held keys. S3 document storage uses AES-256 server-side encryption.
  • Authentication. Identity and access management is provided by Auth0 with support for multi-factor authentication (MFA). We strongly recommend enabling MFA on your account.
  • Row-Level Security (RLS). Every database query is scoped to your account at the PostgreSQL level using RLS policies. Your data cannot be accessed by other users, including CPA users, except for screens you explicitly share.
  • Audit logging. Sensitive mutations (credential changes, document actions, CPA access grants) are recorded in an append-only audit log that cannot be deleted by application users.
  • Vulnerability management. Dependencies are monitored for known CVEs. Security patches are applied on a rolling basis. To report a vulnerability, email security@personnelfinanceai.com.

Financial Regulatory Compliance

Important Regulatory Disclaimer

Personnel Finance AI is NOT a registered investment advisor, broker-dealer, tax preparer, or money services business. The Service is a software tool — not a regulated financial service. You remain solely responsible for your own regulatory compliance.

Securities Laws

If you use automated trading features, you are responsible for complying with all applicable securities regulations, including:

  • SEC Regulation SHO (short sale rules).
  • FINRA Rule 4210 (margin requirements) and Rule 4210(f)(8)(B) (pattern day trader).
  • Regulation T (12 C.F.R. Part 220) governing broker credit extension.
  • Exchange-specific rules for any market on which you trade.

Tax Compliance

AI-generated reports, Schedule C summaries, and tax estimates are informational outputs only. They do not constitute filed tax returns. You are responsible for:

  • Filing accurate federal and state tax returns with a licensed CPA or tax preparer.
  • Reporting all capital gains, income, and taxable events (including crypto if applicable).
  • Complying with wash-sale rules (IRC § 1091) when using tax-loss harvesting features.
  • Meeting quarterly estimated tax payment deadlines (IRC § 6654).

Broker Terms

Automated trading bots execute through your brokerage account via the broker's official API. You must comply with the terms of service of your connected broker (Alpaca, TastyTrade, or others). Personnel Finance AI is not responsible for account restrictions, margin calls, or actions taken by your broker.

AI & Automation Compliance

Personnel Finance AI uses Claude (Anthropic) to power AI chat analysis and automated categorization. The following principles govern our AI use:

  • No model training on your data.Per Anthropic's API terms of service, data you submit through the AI chat is not used to train foundation models.
  • AI outputs are informational only. Automated categorizations, financial summaries, and chat responses are generated by a language model and may contain errors. You should review all AI outputs before relying on them for decisions.
  • Human oversight required. Automated trading bots operate based on configurable rules you set. You retain full responsibility for bot configuration, activation, and any resulting trades.
  • Bias and limitations. AI models may reflect biases present in training data. Financial outputs should always be reviewed by a qualified professional for high-stakes decisions.

Privacy & Data Rights

Your data rights are described in full in our Privacy Policy. Key rights include:

  • Data portability. You may export your transaction data, reports, and uploaded files at any time from the Settings section of the app.
  • Data deletion. You may request deletion of your account and all associated personal data by contacting privacy@personnelfinanceai.com. We will complete deletion within 30 days, subject to retention obligations required by applicable law (e.g., BSA record-keeping requirements).
  • CCPA rights. California residents have the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale (we do not sell personal data).
  • GDPR. If you are located in the European Economic Area, you have rights of access, rectification, erasure, restriction of processing, and data portability under the GDPR. Contact privacy@personnelfinanceai.com to exercise these rights.
  • CPA data sharing. Data is only shared with your assigned CPA for screens you explicitly grant access to via the Shared Screens setting in your profile. You may revoke CPA access at any time.

AML / KYC Obligations

Personnel Finance AI is not a Money Services Business (MSB) and does not hold, transmit, or exchange funds on your behalf. All financial transactions flow directly between your bank or brokerage and the connected institution; we provide data aggregation and analytical tools only.

Notwithstanding the above, we have a zero-tolerance policy for use of the Service to facilitate money laundering, terrorist financing, or sanctions evasion. We reserve the right to:

  • Suspend accounts exhibiting patterns consistent with financial crime.
  • File Suspicious Activity Reports (SARs) with FinCEN if we become aware of activity that triggers a reporting obligation under the Bank Secrecy Act.
  • Screen account holders against OFAC Specially Designated Nationals (SDN) lists and other applicable sanctions lists.
  • Cooperate fully with law enforcement and regulatory investigations.

Compliance Contact

For compliance inquiries, to report a suspected violation, or to exercise your data rights, please reach out via:

Do Not Sell or Share My Personal InformationPrivacy PolicyTerms of Service