This page is for whoever needs to justify it internally: IT, procurement, or your own adviser. It describes where your data lives, how connections work, and what AI does and doesn't do with your data. No marketing language, no claims we can't back up.
Last updated: 5 August 2026
Cashplannr hosts in the EU, in Frankfurt. Your data doesn't leave the EU, except where a subprocessor requires it and has a valid transfer basis, such as the EU standard contractual clauses.
A bank connection runs through PSD2-regulated access, carried out by Ponto. Cashplannr only gets read access to transactions and balances, never access to execute payments.
Connections with accounting software, such as Exact Online, Yuki, Odoo or Winbooks, are also read-only: Cashplannr reads your accounting data, but never writes anything back.
The AI in Cashplannr, such as categorization, reconciliation and forecast suggestions, runs on AWS Bedrock, hosted in Europe.
We apply data minimization: only what's needed for the specific task goes to the model. Personal data that isn't relevant to that task is detected and filtered out before anything goes to the model.
We don't train AI models on customer data. Your data isn't used to improve a model for anyone else's benefit.
Access to an environment runs through roles: who can read, who can edit, who can export. The partner role for your financial adviser, bookkeeper, accounting firm or external CFO is an explicit role with its own rights, not a generic login you have to share.
Data export and deletion are available on request. Get in touch via [email protected].
We work with a limited number of specialized parties to deliver the platform, grouped by category: hosting, e-mail delivery for transactional and marketing communication, and analytics to understand how the product is used. Every subprocessor is contractually bound to at least the same level of protection as our privacy policy. An up-to-date list with the name and location of each subprocessor is available on request via [email protected].