Your numbers tell a story.
You choose who sees it.
Commission records reveal your relationships, rates and income. We build around that sensitivity—and explain the limits of each release.
A preview with a small footprint.
Sample statements in the public demo are processed in your browser tab. They are not sent to our statement storage. Refreshing the page clears them. Do not use confidential client records in the public preview.
We do not add advertising pixels or analytics cookies. Our hosting provider may process request metadata such as IP addresses for delivery and security. Browser extensions and downloaded exports are outside our control.
Two steps before private access.
The private account flow is designed for a password followed by a six-digit email code. A password alone does not open the workspace. Codes expire after five minutes and verification attempts are limited.
Email codes add a check, but do not make compromised email safe. Protect your mailbox with its own strong authentication. We do not describe email verification as phishing-proof.
A separate place for each account.
The private storage implementation checks the signed-in account on the server and applies database row access policies. Database credentials stay on the server. Deployment isolation and delivery checks are required before accepting real client records.
During the pilot, use anonymized samples. Saved records can be exported and deleted from the active workspace. Backup retention and the data-processing arrangements must be finalized before a live-data launch.
Your workspace is not a lead list.
We do not sell IB statement data or give broker sales teams access to your private workspace. A broker introduction would require a separate, explicit request from you.
No live broker credentials are collected in this release. API documentation is not proof of read-only permissions; each future connection needs its own scope and revocation checks.
What this page is—and is not.
This is a description of product behavior and release boundaries. It is not an independent security certification, a regulatory authorization or a claim that all threats have been eliminated.
Reviewed 26 September 2026. Public account registration must remain disabled until operator contact details, privacy terms, email delivery and storage configuration are confirmed.