Security and privacy at Financi
Financi is a CRM for insurance and pension agencies, by Shavve, that processes client data on the agency's behalf under a data processing addendum (DPA) published on the site. Data is encrypted in transit and at rest, access is role-based with multi-factor authentication (MFA), and signed documents are sealed with an AWS KMS signature and kept in a WORM ledger for 7 years.
How data is protected
According to the privacy policy, Financi applies technical and organisational security measures, including:
- Encryption in transit and at rest.
- Multi-factor authentication (MFA) and role-based access control (RBAC): who sees whose clients and who can export.
- Logging and system hardening.
- Daily backups.
- An incident response plan, and notice of a security incident as soon as possible and no later than 72 hours, as set out in the DPA.
A signature that shows any change
The client fills in and signs from a phone with no login and no app. The signed PDF is sealed with an AWS KMS asymmetric signature and kept in a WORM ledger with a 7-year object lock, so any change to the document can be detected. Details are on the forms and signing page.
AI a person approves
- Nothing is written to a field without human approval, and there is undo.
- The AI never writes numbers: it names which figure it means, and the system shows it from the same source.
- The AI inside a client file works on pre-defined fields only.
- ChatGPT and Claude connect through MCP with an OAuth sign-in.
Clearing house and Har HaBituach with client consent
Data from the pension clearing house and Har HaBituach is ordered with the client's consent and unified in one client card. The exact rules on authorisation and on who may order what should be confirmed with the regulator and your compliance adviser. The full explanation is in the guide to Har HaBituach and the clearing house with client consent.
Your data when the engagement ends
Under the privacy policy and the DPA, the client data an agency manages in Financi can be exported for 30 days and is then deleted from production environments. Backups are deleted on their own deletion cycles.
Frequently asked questions
Is Financi secure?
Data is encrypted in transit and at rest, access is role-based with multi-factor authentication, there are daily backups and an incident response plan, and signed documents are sealed with AWS KMS and kept in a WORM ledger for 7 years. No security is absolute, so the agency's own permissions matter just as much.
Who in the agency sees which clients?
Permissions are set by role: who sees whose clients and who can export. Set them before the team joins.
Does the AI write to the system without approval?
No. A person approves every field the AI suggests, there is undo, and the AI never writes numbers.
What happens to our data if we leave Financi?
Under the privacy policy and the DPA, you can export the client data for 30 days, after which it is deleted from production environments. Backups are deleted on their own deletion cycles.
Where is the data processing addendum (DPA)?
It is published on the site, on the DPA page.
Financi's modules
- Forms & e-signingThe customer fills in and signs with a finger from a phone, no login, and a signed, sealed PDF comes back.
- Clearing house & Har HaBituachOrder and pull the customer's pension and insurance data, unified in one card.
- CRM & processesLeads, customers, policies, processes and tasks, with commissions, calendar and role-based permissions.
Keep reading
- Har HaBituach and the Pension Clearing House: Working Properly with Client ConsentHow to use Har HaBituach and Pension Clearing House data properly: client authorisation, what you need from the client, and how to present findings.
- An AI Team for Your Agency: Delegate Without AbdicatingAI assistants on CRM data can save time, but client data needs protecting. What to delegate, where a human approves, and which red flags to know.
More comparisons and guides
Want to see this on a real agency process?
Book a demo and we will walk through a flow from lead to signature, including what Financi does not do.
Financi is by Shavve.
