The records one workflow needs, seen only by approved people
PipsClarity checks authorized records. You keep control of your systems, your money movements and your fixes.
Only the records for one scoped workflow
The written scope names the sources, the fields and the evidence window. We ask for nothing outside it.
Never send these through the public form
- Account passwords
- Trading logins
- Private keys
- Raw transaction files
- Customer lists
One workspace per client
Your workspace only
Each client sees only its own workspace and legal entity records.
No all-clients view
A client workspace never shows another client’s records.
A switch clears the screen
When you switch workspace, the last workspace’s records and pending actions are cleared before the new one loads.
Four roles, each with clear limits
The server checks the current role for every action.
Reads the workspace and imports records. It also sets up sources, assets and rules, and investigates cases.
Team access is granted through a controlled operator process.
Reads evidence and imports source records.
Does not change policies, or investigate or close cases.
Reads evidence, adds investigation notes and acts on cases.
Does not import records or set up rules.
Reads the whole workspace, including the activity log.
Cannot import records, change rules or change a case.
Every action is recorded
Each entry records who did what, to which object and when. It also keeps the reason they gave. No user role can edit or delete an entry.
Audit history
Assigned case to self
S. Carter, instructed transfer case
Reason: investigating with the platform team
Committed import
Integration operator, wallet journal export
Receipt issued
Added investigation note
S. Carter, instructed transfer case
Reason: checked the transfer queue
Every finding keeps what it was based on
- Each result keeps the policy version, mapping, check time and coverage behind it.
- Past assessments and case events are kept.
- A case closed by hand is recorded as a team decision. It is not proof that money or account access arrived.
- PipsClarity checks authorized records. You keep control of every money movement.
How we handle your pilot data
These terms apply to every pilot. Your written scope can make them stricter, never looser.
Where it is kept
Only in the storage named in your written scope. We name the provider and the region before any data moves.
How it arrives
By the transfer method approved in your written scope. Never by email or through the public form.
Who can see it
Only the people named in your written scope, on your side and on ours.
Other providers
Only providers named in your scope can store or process your data. We ask you before adding one, and no AI provider sees your records unless the scope names it.
How long we keep it
We delete your exports and our working copies within 30 days after the follow-up check, which ends the pilot.
Delete it sooner
Ask at any time and we delete your data sooner. We confirm every deletion in writing.
Backups and recovery
We keep no separate backup copies of your exports. If a file is lost or damaged, we ask you to send it again.
Security incidents
We tell you within 72 hours if we learn that your data was exposed.
Certification
PipsClarity is at pilot stage and holds no SOC 2 or ISO 27001 certification yet. We answer your security questionnaire before any data moves.
Questions from security teams
Does PipsClarity need passwords or private keys?
No, PipsClarity works from agreed exports. It never asks for passwords, trading logins or private keys, and the public form refuses notes that contain them.
Can other clients see our data?
No, each client works in its own workspace and sees only its own legal entity records. There is no view across clients.
Who can change a result?
Results come from the agreed rules and the source records. People add notes and decide on cases, and each action is added to an audit history that no user role can edit.
How long do you keep our data?
We delete your exports and our working copies within 30 days after the follow-up check, or sooner if you ask. We confirm every deletion in writing.
Is PipsClarity SOC 2 or ISO 27001 certified?
Not yet. PipsClarity is at pilot stage, so we answer your security questionnaire and set out the controls in your written scope before any data moves.
Questions from your security team
Request a demo and mention a security review.
Security questions can also go to info@pipsclarity.com.