Privacy Policy
Effective July 28, 2026
The Aldebert Financial Ecosystem, referred to here as AFE, is operated by International Services Inc. AFE is a diagnostic platform licensed to professional advisory firms. Those firms use it to measure the financial health of their own business clients and to produce a report called The Aldebert Verdict.
This policy explains what data AFE handles, why, who else touches it, and what your rights are. It is written to be read, not to be impenetrable.
Who is who
Three parties matter, and their roles are different.
- International Services Inc. operates AFE and processes data on behalf of licensed firms.
- The Practitioner Firm is our customer. It is the accounting, consulting, turnaround, or advisory firm that licenses AFE and decides which of its clients to analyze. The firm determines what data enters the platform and why.
- The Client Business is the company being analyzed. Its financial data is the subject of the diagnostic. The Client Business normally has its relationship with the Practitioner Firm, not with us.
For most purposes the Practitioner Firm is the data controller and International Services Inc. is the processor acting on its instructions.
What we collect
Account data
Names, work email addresses, firm name, and role for the people at a Practitioner Firm who use AFE. We do not store passwords, because AFE does not use them. Sign-in works through a single-use link sent to a verified email address.
Business financial data
This is the substance of the product. Depending on how a Practitioner Firm sets up an engagement, AFE receives some or all of the following about a Client Business:
- Revenue, direct costs, gross margin, and overhead
- Debt service, obligations, and owner compensation figures
- Payroll headcount, hours, and billing rates
- Accounts receivable, current assets, and current liabilities
- Uploaded financial statements such as profit and loss and balance sheets
- Accounting records read from QuickBooks Online when a Practitioner Firm connects it
We do not ask for and do not want Social Security numbers, bank account or card numbers, individual employee compensation records, health information, or any other sensitive personal data. Do not upload them.
QuickBooks Online data
When a Practitioner Firm connects a Client Business QuickBooks Online company, AFE requests read access to accounting data only. We use it for exactly one purpose: to populate the diagnostic for that engagement. We do not write to your QuickBooks company, we do not read payroll detail beyond aggregate figures used in the model, and we do not use QuickBooks data to build products for anyone else.
Technical data
Standard server logs including IP address, browser type, timestamps, and pages requested. Used for security, debugging, and abuse prevention.
How we use it
- To compute The Aldebert Score and produce The Aldebert Verdict
- To let a Practitioner Firm track a Client Business over time
- To alert a Practitioner Firm when a client metric crosses a threshold
- To authenticate users and secure accounts
- To support, maintain, and improve the platform
- To meet legal and tax obligations
Who else touches the data
AFE relies on a small number of subprocessors. Each one is listed with what it actually sees, because a list of vendors without that detail is not a disclosure.
| Subprocessor | Purpose | What it can access |
|---|---|---|
| Anthropic | Reading uploaded financial statements, and writing the plain-language narrative and remediation Playbook | Financial figures and uploaded statement contents for the engagement being processed |
| Neon | Managed PostgreSQL database | All stored platform data, encrypted at rest |
| Vercel | Application hosting and delivery | Data in transit, server logs |
| Resend | Transactional email, sign-in links and alerts | Recipient email address, client name, alert text |
| Intuit | QuickBooks Online source data | The accounting data you authorize, read only, and only while the connection is active |
About the model provider
Two parts of AFE send data to Anthropic. The first reads uploaded financial statements and maps line items to the diagnostic. The second writes the narrative and the Playbook. This is disclosed plainly because it is a genuine transfer of financial information to a third party.
One thing worth understanding: the model never produces the score. Every number in The Aldebert Score and The Aldebert Verdict is computed by a deterministic engine we control. The model writes prose and interprets documents. It does not decide what your business is worth or how healthy it is.
The client portal
A Practitioner Firm can share a Verdict with a Client Business through a tokenized link. That link is scoped to one shared Verdict and nothing else. It grants no access to the Practitioner Firm account, to other clients, or to any other part of the platform. A firm can revoke it.
How it is protected
- Tenant isolation at the database level. Every tenant-scoped table enforces row-level security, so one firm cannot read another firm data even if application code were flawed.
- Encrypted OAuth credentials. QuickBooks access and refresh tokens are encrypted with AES-256-GCM before storage.
- No passwords to steal. Authentication uses single-use links that expire in 24 hours.
- Encryption in transit and at rest across the platform.
- Role-scoped access. Users within a firm hold roles that limit what they can see and change.
No system is perfectly secure, and we will not claim otherwise. If we discover a breach affecting your data, we will notify the affected Practitioner Firm without undue delay.
Where data lives and how long
Data is stored in the United States. We keep engagement data for as long as the Practitioner Firm maintains its license and the engagement remains open, then for a limited period afterward to allow for reactivation and to meet legal obligations.
Disconnecting QuickBooks stops all further reads immediately and deletes the stored access credentials. Diagnostic snapshots already produced are retained unless deletion is requested, because they are the historical record the Practitioner Firm relies on.
Your rights
Depending on where you are, you may have the right to access, correct, export, or delete personal data, to object to processing, or to withdraw consent.
If you are a Client Business, start with your Practitioner Firm. They decide what enters the platform and they can delete an engagement. If they cannot help, contact us and we will work with them.
If you are a Practitioner Firm, contact us directly and we will action verified requests.
Children
AFE is a business tool sold to professional firms. It is not directed at anyone under 18 and we do not knowingly collect data from minors.
Changes
We will update this page when the platform changes and revise the effective date. Material changes affecting how financial data is handled will be communicated to Practitioner Firms directly rather than only posted here.
Contact
International Services Inc.
Privacy questions and data requests: jay.aldebert@biz-solve.com