Security by Design
Authentication, tenant isolation, and reviewability are built into the product architecture from the beginning.
NorthernClarity SystemsBook a DemoTrust Center
Finance teams trust software with their most sensitive data. We take that responsibility seriously.
NorthernClarity is designed around secure authentication, tenant isolation, transparent AI, and modern cloud infrastructure.
Built on Google CloudTenant isolationAI with human reviewFinance-first design
Our principles
Built for finance workflows that need review, control, and traceability.
Customer Data First
Customer files are processed for the requested finance workflow and remain under customer ownership and control.
Human Oversight
Finance professionals review AI-generated outputs before they are used for reporting or decisions.
Transparency
Recommendations are designed to show confidence, evidence, and review status instead of hiding the reasoning.
Legal entity
NorthernClarity Systems Oy
NorthernClarity Systems Oy is registered in Finland and operates the public website, Finance AI Workspace, and related NorthernClarity product services.
Legal Entity
NorthernClarity Systems Oy- Registered in
- Finland
- Business ID
- 3588846-8
- D-U-N-S
- 369283468
Infrastructure
Modern cloud infrastructure with European-region operations.
The finance workspace is built on managed Google Cloud and Firebase services, with the finance backend deployed in Europe and finance runtime guardrails separated from other products.
VVertex AIUserCFO, controller, or finance managerdown
AuthenticationFirebase Authenticationdown
Finance WorkspaceTenant-scoped backend and PostgreSQLdown
AI EngineVertex AI with finance workflow contextdown
ReportsWord and PowerPoint outputs
European cloud regions
Finance AI is operated on Google Cloud and Firebase infrastructure in European regions for the current production setup. Customer-specific data residency requirements can be reviewed during onboarding.
Google Cloud and Firebase
The workspace uses Firebase App Hosting, Firebase Authentication, Cloud Run, Cloud SQL, Cloud Storage, and Vertex AI in the finance operating model.
Encrypted connections
Traffic is served over HTTPS/TLS with security headers on the public site and workspace.
Tenant-scoped storage
Finance data is stored with tenant and project context so customer workspaces remain separated in the backend model.
AI & Data
AI supports finance judgement. It does not replace it.
Finance AI is designed to process customer data for the requested workflow. AI can be wrong, so outputs are built for human review before reporting or decision-making.
- Customer data is processed only to deliver the requested finance workflow.
- Uploaded files are processed to provide the requested analysis, report, or export.
- Customer data is not intentionally used by NorthernClarity Systems to train public AI models.
- AI-generated outputs should be reviewed before they are used for financial reporting or decision-making.
- Customers retain ownership of their data and uploaded documents.
Auditability
Auditability is where finance teams build trust in AI output.
Recommendations are designed to show their path to review, from account classification and confidence to evidence, human review, and audit trail context.
Accountdown
AI classificationdown
Confidencedown
Evidencedown
Human reviewdown
Audit trail
Access control
Access is verified before finance data is reached.
The product is designed around authenticated users, controlled tenant membership, and explicit backend checks for protected finance workflows.
Authenticated access
Authenticated access through Firebase Authentication.
Firebase ID token verificationVerified requests
Every request is verified before finance data is accessed.
Backend token validationTenant isolation
Finance workspaces are separated by tenant context and backend membership checks.
Tenant-scoped persistenceRole permissions
Owner, admin, member, and viewer roles support controlled workspace access.
Role-based access modelResponsible AI
AI recommendations are designed to support professional judgement, not replace it.
Outputs should always be reviewed. Explainability, source context, confidence, and review steps are core design goals for finance use cases.
Compliance
Designed with practical compliance principles.
- GDPR principles
- Privacy by Design
- Least privilege access
- Tenant isolation
Enterprise capabilities
Capabilities discussed for enterprise deployments.
These are examples of enterprise deployment requirements, not current certification claims or contractual promises.
- Expanded audit coverage
- Customer-managed deployments
- SSO
- Advanced role management
FAQ
Common trust questions for finance teams.
Where is customer data stored?
Finance AI is operated on Google Cloud and Firebase infrastructure in European regions for the current production setup. Customer-specific data residency requirements can be reviewed before production rollout.
Is my data used to train AI models?
NorthernClarity Systems processes customer data to deliver the requested finance workflow. Customer data is not intentionally used by NorthernClarity Systems to train public AI models. Provider-specific terms can be reviewed during onboarding.
Can I delete my data?
Data deletion requests can be submitted through support and are handled according to the applicable customer agreement, privacy policy, and operational requirements.
How is data protected?
The workspace uses authenticated access, backend request verification, tenant-scoped persistence, HTTPS/TLS, and controlled storage paths for finance workflows.
Who owns uploaded documents?
Customers retain ownership of uploaded documents, reports, and finance data. NorthernClarity Systems processes them to provide the requested service.
Can NorthernClarity Systems access customer data?
Access is limited to operating, supporting, and improving the service under the applicable customer agreement. Customer-specific access requirements can be reviewed during implementation.
Can Finance AI be deployed in a customer's own environment?
Customer-managed deployments are discussed as an enterprise capability for larger deployment requirements.
Do you support Single Sign-On (SSO)?
SSO is planned as part of the enterprise capabilities roadmap and can be discussed for enterprise deployments.
Questions about security?
Review security, privacy, and AI governance before deployment.
For specific data residency, procurement, or enterprise access requirements, contact us.