What FinPilot can access and its limits

FinPilot is built to be helpful and safe. Here's what it can and can't do.

It reads, but it doesn't act on its own

• FinPilot can read your finance data — expenses, bills, cards, wallets, vendors, transactions, and analytics — to answer questions and draft documents.
• It can't approve, pay, or post to your books. It suggests; a person reviews and approves.

Your data stays yours

• Everything is scoped to your organization — FinPilot can't see another company's data.
• What's sent to the AI: your chat messages, the receipts/bills you upload, and the on-screen context so answers are relevant.
• What's never sent: passwords, MFA codes, or full card numbers/CVV.
• The AI provider (Anthropic Claude, via AWS) doesn't store your prompts or use your data to train its models.

Consent and control

The first time you use it, you accept an AI consent notice. You can revoke it anytime under Settings → FinPilot AI.

It can be wrong

AI-extracted details and matches are suggestions — review them. Amounts can have discrepancies, and compliance flags are prompts for you to consider, not automatic blocks. You can edit any field before submitting.