Each workspace is its own database
Every workspace lives in its own isolated database on Cloudflare's infrastructure. There's no shared table where one family's records sit next to another's. Data is encrypted in transit (HTTPS only, enforced with HSTS) and at rest, with keys managed by Cloudflare, so a copy of the stored data or a backup is unreadable on its own.
Worthbase isn't end-to-end encrypted, and we'd rather say so plainly. To work out your net worth, gains, history and alerts, and to answer your AI app's questions, the server has to read your records. That's why we put the effort into isolating them and limiting who can reach them.
No bank connections, nothing that can move money
- Worthbase doesn't connect to banks, brokers or super funds, and doesn't use data aggregators. Your records come from documents you choose to share with your AI app, so there's no third party holding a live feed of your accounts.
- Worthbase only records what has already happened. Nothing in it can make a payment, transfer money or place a trade.
Only the people you invite
- Sign-in is handled by Clerk. Worthbase never sees or stores your password.
- Workspace members have one of four roles: viewer, editor, admin or owner. Every request is checked against your role before any data is touched.
- Connectors use OAuth 2.1 with PKCE. The token your AI app receives only works for Worthbase, and you can disconnect it at any time from the app.
- Worthbase never asks for, stores or uses your bank, broker or super logins.
- When a new AI app connects to your account, or someone joins your workspace, we email you.
What our team can see
- We don't look at your records. Our support and maintenance tools can restore a workspace to an earlier point or delete an account on request, but they have no way to browse what's in a workspace.
- Access to production systems is limited to a small number of people and protected with multi-factor authentication.
- Our service logs record what happened (for example, which tool an AI app called and whether it succeeded), never your figures, holdings or document contents.
What your AI app sees
When you ask your AI about your finances, Worthbase sends it the answer: figures, holdings and so on. That response is then handled by your AI provider (for example Anthropic or OpenAI) under their privacy terms and your account settings. Worthbase only sends what the tool you called returns, and only to apps you've connected and approved.
Nothing changes behind your back
- Preview first. Every import is previewed, and nothing is saved until you (through your AI) confirm it.
- Full audit trail. Every row records which file and row it came from, who added it, through which app, and when.
- No silent deletes. Your AI and the API can only archive and undo, never permanently delete. Undo re-checks your entire history and refuses if the result would be inconsistent.
- Exact maths. All arithmetic uses exact decimals and whole cents, never floating point.
Payments
Subscriptions are processed by Stripe. Your card details go straight to Stripe and never reach Worthbase's servers.
What not to add
Worthbase needs balances and holdings, not secrets. Don't add passwords, PINs, full card or account numbers, tax file numbers, or crypto private keys and seed phrases, in names, notes or anywhere else. Last 4 digits are plenty to tell accounts apart. Worthbase tells connected AI apps the same, and they'll leave these out when they read your statements.
Your data is yours
You can export everything in your workspaces as a file from your account page at any time, including after you cancel. To have your account and data deleted, email privacy@worthbase.app.
Backups are kept for 30 days so we can recover from mistakes, and deleted data leaves them within that time. We don't sell your information, show ads, or use your financial records to train AI models.
Found a security issue? Please email security@worthbase.app. We'll respond quickly and credit responsible disclosure.
