Security and data protection

ImpactAccounting.ai is operated by ViSoftware SA, a company registered in Switzerland (UID CHE-168.413.226).

The application runs on Vercel in Frankfurt, Germany. The database, sign-in records and uploaded files are held by Supabase, also in Frankfurt. Supabase backs up the database every day.

Two of our subprocessors work in the United States: OpenAI, which runs the AI analysis and chat, and Resend, which delivers sign-in codes and service emails. The list below says what each provider receives and where.

Projects still on v1.impactaccounting.ai run on the earlier version of the product, which is hosted in the United States with other providers. We move a project here, or delete it, when you ask.

Every connection to the service is encrypted with TLS, and so is every connection from our servers to the database and to our providers.

Data at rest is encrypted by the providers that store it: Supabase for the database and uploaded files, OpenAI for the documents the AI reads, and PostHog for analytics. Each describes its encryption in its own security documentation.

Uploaded files sit in private storage. A download is handed out only after an access check, through a link that expires after one minute.

You sign in with a one-time code sent to your email address, or with your Google account. We store no passwords.

Every project belongs to a workspace, and each member of a workspace has one of three roles:

• Owner: adds and removes members, sets their roles, and can delete the workspace.
• Editor: creates and deletes projects, uploads documents, runs analyses, changes models and publishes results.
• Viewer: reads the workspace's projects and results.

Your browser never reads the database directly. Every request goes through our server, which checks your membership and role before it reads or changes anything. Row-level security is switched on for every table as a second barrier, closed to the browser.

If you connect Claude to ImpactAccounting.ai, you approve it on our sign-in page. It can then act as you do with an editor's rights in your workspaces, and nowhere else. Removing the connector in Claude ends its access.

Single sign-on through your own identity provider (SAML) and enforced two-factor sign-in are not available.

A few ViSoftware staff hold an administrator role, so they can support customers and check the quality of analyses. An administrator can read any project, but can change only the projects of workspaces they belong to.

Our developers and evaluation tools read production through read-only logins. Access to our provider accounts is limited to the people who run the service, and everyone with access to customer data is bound by confidentiality.

Every change to the code is tested automatically and reviewed before it reaches production, and our dependencies are kept up to date by automated updates.

ImpactAccounting.ai uses OpenAI's models through OpenAI's business API, as of November 2026. The providers we use can change; customers with a Data Processing Agreement hear about a change 30 days ahead.

OpenAI receives what each analysis or answer needs: the documents you upload to a project, the project's setup and model, and your messages in its chats. When the AI researches an organization, its web searches also run through OpenAI.

Your data does not train AI models. OpenAI does not train on data sent through its API, and we do not train or fine-tune models on customer data.

OpenAI keeps the responses of an analysis for 30 days, so each step of the analysis can build on the steps before it. Chat answers are not kept. Under its standard API terms, OpenAI may also keep requests for up to 30 days to detect abuse, and then deletes them.

Uploaded documents are also stored as files at OpenAI, so the AI can read them in later analyses and chats. Deleting a document, a project or a workspace deletes its files at OpenAI as well. A copy of a project keeps the files its copied analysis reads until the copy is deleted too.

Every prompt and answer of an analysis is kept in our database with its project, so your experts can trace how a figure was reached. The analytics events we record for AI calls carry only technical details, such as the model, the duration and the number of tokens, never the prompts or answers. Session recordings, described under Subprocessors, can show what was on screen, chat included.

If you connect Claude, what Claude reads from ImpactAccounting.ai goes to Anthropic under your organization's own terms with Anthropic.

We keep your projects for as long as your workspace exists. Nothing expires on its own.

An editor can delete a project, and an owner can delete a workspace with all its projects. Deletion removes the records and stored files from our live systems at once, including the documents held at OpenAI. Copies in database backups expire with the backup cycle.

You can download a project's results as an Excel workbook at any time, and we export a full project on request.

To delete your account, write to info@impactaccounting.ai.

As a Swiss company we follow the Swiss Federal Act on Data Protection (FADP), and the EU General Data Protection Regulation (GDPR) where it applies to the people whose data we process. For the content you put in the service, your organization is the controller and ViSoftware is its processor. Our Privacy Notice covers the data we handle as controller, such as accounts and visits to this website.

Our Data Processing Agreement is available on request. It covers:

• processing only on your instructions, and never for AI training;
• confidentiality for everyone who handles your data;
• the security measures described on this page;
• the subprocessors above, with 30 days' notice before a change and a right to object;
• help with requests from the people whose data you hold;
• notice of a personal data breach within 72 hours;
• transfers outside Switzerland and the EU under recognised safeguards: the Data Privacy Framework where the recipient is certified, and standard contractual clauses otherwise;
• a written security questionnaire once a year, and an audit if the answers are not enough;
• return and deletion of your data within 30 days after the contract ends.

We also sign your NDA on your template.

ViSoftware holds no security certification such as SOC 2 or ISO 27001. Our providers publish their own certifications and audit reports.

We answer security questionnaires, and walk your security team through the architecture on request.

Report a vulnerability or a suspected incident to info@impactaccounting.ai. Please give us the chance to fix a vulnerability before you disclose it.

If a breach affects personal data in your workspaces, we tell you without undue delay, and within 72 hours of learning of it, with what we know and what we are doing about it.

Questions about this page, and requests for the Data Processing Agreement, go to the same address.