The financial industry is racing to add AI. Most platforms send your tax returns, account numbers, and personal details straight to cloud servers. We took a different path.
Major custodians and planning platforms are feeding client tax returns, pay stubs, account statements, and portfolio holdings directly into cloud AI models. The protection? A contract that says the AI provider won't keep it. That's it.
Some platforms reference "LLM providers" in their policies without naming who they are. Others name the providers but never explain what data gets sent or how it's protected in transit. Read the fine print and you'll find broad rights to retain transcripts, summaries, and recordings for "product improvement."
In many platforms, it's the financial advisor's responsibility to get consent from their clients before AI processes their data. The platform itself doesn't ask. End clients often have no direct opt-out and may not even know their information was sent to an external AI.
When a platform is also the custodian, they already hold every account balance, every transaction, every beneficiary name. Add AI that pulls from CRM, meeting recordings, uploaded tax documents, and real-time account data, and you've got the most complete picture of a client's financial life sitting inside cloud AI infrastructure.
The industry's AI privacy model is built on contracts and promises. If the contract is honored, you're fine. If it's not, your Social Security number, tax return, and net worth were sent in full with nothing to protect them.
Meet Enzo. Three tiers of intelligence. You pick the level. Privacy is the default.
1,700+ financial question-and-answer pairs built into the application. You ask a question, the answer comes from a local database on your device. No AI model. No internet connection. No data goes anywhere.
Zero network callsA downloadable language model that runs entirely on your computer. It takes the Q&A results and reformats them into natural conversation. It never invents information and never connects to the internet. Your hardware, your processing.
Runs on your deviceConnect to a cloud AI provider for deeper analysis. Before your question leaves your device, our code scans for names, Social Security numbers, account numbers, addresses, and dollar amounts and replaces them with anonymous tokens. The AI reasons about your situation without knowing who you are.
Identity stripped firstYou choose which tier to use. You can change it anytime. The default is Tier 1, which requires no internet, no AI model, and sends absolutely nothing anywhere. And importantly, in all three tiers, the AI assistant does not have access to your dashboard data, engine results, or any financial information in the application unless you specifically include it in your question.
When you use Tier 3 (external AI), here's what happens before anything leaves your device.
The scrubber runs two passes: first against your saved financial profile (names, amounts, accounts, addresses, institutions), then against common patterns (SSNs, credit cards, phone numbers, emails). If the verification check detects that any known PII survived the scrub, the request is blocked entirely and falls back to local processing. We designed this to catch the identifiers that matter most. Still, we recommend exercising reasonable care with what you share in free-text questions. It's code, not magic. But honest disclosure about limits, education, and awareness can foster a collaborative spirit to help us all make the best use of technology.
| Capability | Typical Industry Approach | Home Office OS |
|---|---|---|
| Default AI mode | Cloud AI (always on) | ✓ Local Q&A, no AI, no internet |
| Local AI option | ✗ Not offered | ✓ On-device via WebGPU |
| PII scrubbed before cloud AI | ✗ Data sent in full | ✓ Two-pass scrubbing with verification |
| User chooses AI level | ✗ One mode, no choice | ✓ Three tiers, user picks |
| AI sees your dashboard data | ✗ Full access to account data | ✓ No access unless you share it |
| Works without internet | ✗ Requires connection | ✓ Tiers 1 and 2 fully offline |
| Data retained by platform | ○ Transcripts, summaries retained | ✓ Nothing. All local. |
| Privacy protection model | Contractual (legal agreements) | ✓ Technical (code scrubs PII) |
AI should help you think, not think for you. It should surface insights from your financial data, not make decisions on your behalf. Good judgment still matters. Good habits still matter. AI just makes them more informed.
We don't need to promise not to look at your data because we engineered a system where we never see it in the first place. Your financial life stays on your device. That's not a policy. It's how the software works.
We don't care what you had for breakfast, what you browse, or how much you spend at coffee shops. We built a financial planning tool, not an advertising platform. There's no tracking, no analytics, no behavioral profiling. You're a person, not a product.
The industry protects your data with legal agreements. We protect your data with code. Contracts can be rewritten, reinterpreted, or breached. Our scrubber either strips identifying information from the request before it leaves, or it blocks the request entirely. We chose engineering over legalese.
AI that respects your data. Zero calls to the cloud unless you say so.
