Legal
Three sections on one page: what happens to your data, the terms the Standard and the subscription are sold on, and the data processing agreement that covers AI team members built inside your accounts. Nothing here is longer than it needs to be.
Privacy
What is collected.
Aggregate analytics, and only after you consent. No analytics is recorded before consent. Your email address, if you subscribe to the newsletter.
What is never collected.
Client names, Social Security numbers, Employer Identification numbers, account numbers, or any real client data of any kind. A submission that contains them is deleted rather than processed. Every sample published on this site is built on demo data.
No sale, no ad networks, no fingerprinting.
Your data is not sold, rented or shared with partners. There is no advertising pixel on this site, no cross-site identity graph and no device fingerprinting.
Who processes it.
Aggregate analytics are processed by Google Analytics, with measurement denied until consent. Our static host serves the pages and holds request logs.
How long it is kept.
Newsletter records until you unsubscribe, plus 30 days. Analytics for 14 months.
Your choices.
Unsubscribe in one click, in every issue. Ask for a copy of what we hold, or ask us to delete it, and it is done within 30 days. Consent for analytics can be withdrawn at any time from the consent control.
Last updated 31 October 2026.
Terms
The basis of everything below.
The Standard is technical verification, not a legal or professional opinion.
Licence.
The Firm-Safe Standard v1.0 is published under CC BY 4.0. You may use it, copy it, adapt it and run it commercially, including inside your own documents and tooling, provided you attribute it as Firm-Safe Standard v1.0, published 26 October 2026, firmsafe.io/standard, CC BY 4.0. No permission is needed and no fee is paid. No executable code is published with v1.0.
What a finding is.
A finding is a statement about one data path, on one date, built from evidence the firm supplied, against one published version of the Standard. It names its version, its date and its verifier. A finding is not a statement about the firm, about any vendor, or about any date after the one it names. It does not certify a firm, a tool, a vendor or a verifier.
This is not an audit.
This is not a legal opinion or a security opinion, and not an opinion on a firm's regulatory position. Not a substitute for the firm's own IT or insurer review.
The subscription.
Month to month, in the plans and prices published on the pricing section of this site. Prices exclude VAT. There are no quotes, no change orders and no hourly billing: a request is a job you would give a person, and the queue is the unit of work. The workflows and prompts built for a firm are that firm's: on exit they are handed over with a runbook.
The live-or-free promise.
The first AI team member is live and passing all 10 blocking checks within 30 days of the scheduled start date, or month one is refunded and the build continues. The promise covers delivery, not outcomes: it is not a security guarantee, and nobody is certified by us. If a promised check fails, it is fixed at our cost, not the firm's.
Terms of the engagement.
Liability, indemnity, the term of the engagement and the governing law are set out in the engagement letter signed before any work begins. Nothing on this page varies those terms.
Disputes and refunds.
Dispute a result in writing and it is re-run against the same version of the Standard. If the result still stands on the evidence, the refund is paid. If it does not stand, the result is corrected and the corrected version is issued. The customer wins a dispute, and there is no arbitration clause that says otherwise.
What we do not sell.
Sign-off on your regulatory position, or any opinion about it.
Last updated 31 October 2026.
Data processing agreement
Who we are to your data.
When FirmSafe builds and runs AI team members inside a firm's own accounts, the firm is the controller of its clients' personal data and FirmSafe acts as a processor for that firm under UK GDPR and GDPR Article 28. A written data processing agreement is signed before the first AI team member goes live, and it covers every AI team member on the subscription.
What the DPA commits us to.
AI team members, memory, logs and keys live in the firm's own cloud accounts, in a UK or EU region, and the firm can remove our named-user access in one click. We process client data only on the firm's documented instructions, work with test data or masked samples wherever possible, keep every access logged, and do not use client data to train any model: models are used through enterprise APIs whose terms exclude training on submitted data.
Subprocessors.
The firm's own vendors (Microsoft, Amazon Web Services, Xero, Intuit and the like) remain processors to the firm under the terms the firm already has with them. FirmSafe introduces no subprocessor with access to client data without the firm's written agreement first.
On exit.
The knowledge base, prompts and workflows stay in the firm's accounts, handed over with a runbook. Our named-user access is removed on request and confirmed in writing.
This page summarises the agreement; the signed document governs. Ask for it before subscribing.