Worthbase
Sign in Start free trial
Security

Your numbers. Your control.

Worthbase holds some of the most sensitive information you have. Here's exactly how it's handled, in plain language.

Each workspace is its own database

Every workspace lives in its own isolated database on Cloudflare's infrastructure. There's no shared table where one family's records sit next to another's. Data is encrypted in transit (TLS) and at rest.

Only the people you invite

  • Sign-in is handled by Clerk. Worthbase never sees or stores your password.
  • Workspace members have one of four roles: viewer, editor, admin or owner. Every request is checked against your role before any data is touched.
  • Connectors use OAuth 2.1 with PKCE. The token your AI app receives only works for Worthbase, and you can disconnect it at any time from the app.
  • Worthbase never asks for, stores or uses your bank, broker or super logins.

What your AI app sees

When you ask your AI about your finances, Worthbase sends it the answer: figures, holdings and so on. That response is then handled by your AI provider (for example Anthropic or OpenAI) under their privacy terms and your account settings. Worthbase only sends what the tool you called returns, and only to apps you've connected and approved.

Text from your documents is treated as data, never as instructions. Worthbase tells connected AI apps to ignore any instructions hidden in a statement, and to confirm with you before saving or undoing anything.

Nothing changes behind your back

  • Preview first. Every import is previewed, and nothing is saved until you (through your AI) confirm it.
  • Full audit trail. Every row records which file and row it came from, who added it, through which app, and when.
  • No silent deletes. Your AI and the API can only archive and undo, never permanently delete. Undo re-checks your entire history and refuses if the result would be inconsistent.
  • Exact maths. All arithmetic uses exact decimals and whole cents, never floating point.

Payments

Subscriptions are processed by Stripe. Your card details go straight to Stripe and never reach Worthbase's servers.

Your data is yours

You can export everything in your workspaces as a file from your account page at any time, including after you cancel. To have your account and data deleted, email support@worthbase.app.

Found a security issue? Please email security@worthbase.app. We'll respond quickly and credit responsible disclosure.