Trust center
How we keep Grace safe enough for regulated finance.
Grace is the AI at the core of My Plan Keeper, the conversational intelligence platform for retirement. We built her for an industry where a wrong answer has real consequences. Security and compliance were not a phase we added later. They are the reason it took us longer to launch than the tools that skipped them.
Contact SecurityGrace can be deployed inside your own environment. If your security team requires it, she runs in your cloud and can connect to your own model provider, so your users' data never has to leave infrastructure you control. For partners who don't need that, we run a fully managed, isolated deployment. You choose the model that fits your requirements. We are not locked to a single vendor.
The model is not the safeguard. Our layer on top of it is. Every conversation runs through a control system that flags in real time when a conversation drifts toward legal, tax, investment, or medical advice, and shapes Grace's response so she educates and refers, never advises; keeps a human in the loop, so flagged and higher-severity conversations trigger review, not a silent response; and stays inside a defined scope. Grace educates and helps people think through their retirement decisions; she does not give personalized investment, tax, legal, or medical advice.
Your data is encrypted in transit (TLS 1.2 or higher) and at rest. We send only the minimum a request needs to the model. We do not permit your data to be used to train third-party foundation models. An anonymous mode lets people talk to Grace without creating an account or sharing personal identifiers. The public assistant is rate limited to protect against abuse, and our edge is protected by Cloudflare's managed web application firewall and always-on DDoS mitigation.
Responsible AI is our foundation. We build on leading foundation models under enterprise agreements and wrap them in our own safety and retirement-intelligence layer, so behavior is governed by us, not left to a general-purpose model.
We run Grace on a small set of enterprise-grade infrastructure and AI providers. Under our agreements, none of your data is used to train their models. A full, current list of our sub-processors is available to partners and their security teams on request at [email protected].
If your procurement or security team needs our full security package, sub-processor list, or a walkthrough, contact [email protected] and we'll get it to the right people.
If your procurement or security team needs our full security package, sub-processor list, or a walkthrough, we'll get it to the right people.
Email [email protected]