we do not sell it.
we do not train on it.
your clients trust you with their life's finances. shandy is built so you can extend that trust to an assistant without giving anything away. this page is the position in full, written plainly, because a firm should not have to read terms to find out how its data is handled.
three commitments sit underneath everything else here: client data is never sold, it is never used to train ai models, and advice remains human led. the rest of the page is how those commitments are enforced in the product rather than asserted on a website.
how the product
is put together.
data protection is easy to claim and harder to design for. these four principles decided how shandy was built, which is why they are stated as constraints on the product rather than as aspirations.
-
01
recognised standardsindependently assessed
shandy is built against independently recognised security and privacy certifications, so the firms that rely on it can answer their own clients' questions with something stronger than a vendor's reassurance. we will share our current security documentation, including the certifications we hold and their scope, with any firm that asks before or after signing up.
-
02
retention you controlcontrols that forget on purpose
recordings and transcripts are the most sensitive material shandy handles and the least useful to keep once the record is written. configure automatic deletion on your firm's own schedule, keep exactly what your obligations require, and let the rest go by policy rather than by someone remembering to do it.
-
03
never sold, never training datano secondary use
we do not sell client data, and we do not use it to train ai models. there is no secondary use, no anonymised resale, and no clause that quietly permits either later. it is your firm's information, held to do your firm's work, and that is the entirety of the arrangement.
-
04
advice stays human leda product constraint
everything shandy produces is a first draft that requires adviser review. nothing is sent, filed as final or issued to a client automatically. the judgement, the relationship and the final decision remain with the person whose name is on the advice, and that is enforced by how the product works rather than by guidance in a help page.
different material, different treatment.
a recording, a transcript, a written summary and a drafted document are not equivalent risks and should not be kept on equivalent terms. shandy treats them separately so a firm can be strict where it matters without losing the record it needs.
access is a configuration, not a convention.
in most practices, who can see a client file is a matter of where the document happens to be saved and who was on the email. that is not a control, it is a habit. shandy makes access an explicit setting owned by the firm.
advisers see their own book. teams see the clients they support. compliance sees what it needs to review. drafting rights and sign off rights are granted separately, so a paraplanner can prepare a document without being able to approve it.
- which advisers and teams can view each client record
- who may draft against a record and who may sign work off
- which form fields may be completed automatically
- which fields are fixed and cannot be altered by an adviser
- how long recordings and transcripts are retained
- who administers members, access and billing
it is your firm's information,
held for your firm's purpose.
that sentence is the whole policy. everything on this page exists to make it true in practice: retention you control, access the firm sets, no secondary use, and no model trained on your clients.
if your compliance function needs something specific in writing, ask and we will put it in writing.
the questions a compliance function asks first.
do you use our client data to train ai models?
no. client data processed through shandy is not used to train ai models, and it is not sold or shared for anyone else's commercial purpose. it is held to deliver the service to your firm.
how long are recordings and transcripts kept?
for as long as your firm decides. retention is configurable, and deletion of recordings and transcripts can be automatic on a schedule you set. the written record remains after the source material is deleted, so you keep the substance without keeping the audio.
can an adviser see clients that are not theirs?
only if the firm has granted that access. permissions are set centrally by adviser and by team, and viewing, drafting and sign off are separate rights, so support staff can prepare work without gaining approval authority.
does shandy ever contact a client directly?
no. shandy drafts client emails when asked and leaves them for you to review and send. nothing is dispatched automatically, and no document is issued to a client without a person deciding to issue it.
is shandy giving regulated advice?
no. shandy drafts documents from what you and your client have discussed, and determining suitability remains regulated work carried out by the adviser. every output arrives marked as a draft for adviser review.
what happens to our data if we stop using shandy?
it remains your firm's data. tell us you are leaving and we will confirm export and deletion in writing, including the material covered and the timescale, so your own record keeping obligations can be met cleanly.
can we see your security documentation before we sign up?
yes. ask and we will share the current documentation, including the certifications we hold and their scope. if your compliance function has a specific question or a standard form it needs completed, send it over.
bring us
the hard questions.
if there is something your firm needs confirmed before it will put a client conversation through an assistant, ask it directly. a clear answer now is worth more to both of us than a signature this month.