Security
Built so that it can’t do the worst things
You are trusting Selfirm with the full picture of your money. The strongest protections are the ones that do not depend on anyone behaving well, so we start with what Selfirm is unable to do.
What Selfirm cannot do
It cannot move money
Transfers, trades and signing are not capabilities in the system at all — not for people, not for programs, not for AI agents.
It holds no bank credentials
Selfirm reads files you hand in. It never asks for online-banking logins and has no standing access to your accounts.
AI cannot write your record
AI reads files and proposes. Only a confirmed decision — yours — becomes a fact, and each one records who made it.
Imported text cannot give orders
PlannedText inside a statement or document is treated as data, never as instructions, so a crafted file cannot change what an agent may do.
Controls you have
Switch AI reading off
Per workspace, you decide whether file contents may be read by an AI model. Off means Selfirm uses only its deterministic readers and asks you the rest.
A full history
Every change to your record is versioned, with its source file or the person who made it.
Agents with zero default permissions
PlannedWhen agents arrive, each will start with no permissions and receive them per task, for a scope and a period you set.
Export and leave
PlannedOpen-format export of everything, and read-only access after you stop paying.
What we will publish before general availability
Tenant isolation, encryption at rest and in transit, key management, where your data is stored, which sub-processors we use (including the AI model provider), and our incident process. During early access, each design partner receives a written data-handling agreement before sending any files.
To report a security issue, write to hello@selfirm.com.