At airCFO, we understand the trust our clients put in our team with handling some of their most sensitive data. For this reason, we take great measures to protect both our clients' and our own information. This page outlines our key security measures and practices so you have peace of mind that your information is secure.
Rather than maintaining our own data storage infrastructure, we leverage industry-leading third-party tools and Google's cloud infrastructure. This approach allows us to leverage robust security controls from established companies while layering on additional security protocols specific to our operations.
Data transmitted through email, Google Docs, and Google Sheets are protected through Google Workspace's backup systems, including regular testing and rapid recovery capabilities to maintain continuous data availability. The rest of your financial data is housed in leading FinTech platforms with strong security protections and SOC2 type 2 certifications:
We recognize that the biggest risk vector for a company like airCFO lies in a malicious actor gaining access to a client’s data through physical device theft or social engineering. To mitigate these risks, we’ve implemented multiple layers of security through industry-leading tools:
Security isn't just about technology – it's about people. Our team is committed to protecting your data through:
We often get asked whether airCFO is SOC2 compliant; we understand this is a common standard for technology companies to comply with. In 2024, we worked with an InfoSec partner to evaluate our security framework and implement controls most relevant to our data infrastructure. Since we operate airCFO entirely through third-party tools (Google, Slack, QBO, etc.) and don’t store/transmit data through our own platform, we determined that SOC2 compliance isn’t a relevant yardstick for measuring our security.
Instead, we focus on practical security measures including that directly enhance our security posture rather than pursuing certifications that may not actually help keep client data protected. So, while we aren’t officially SOC2 certified, we’ve taken the necessary precautions to prevent our clients’ data from falling into the wrong hands.
For detailed questions about our security practices or to request specific security documentation, please contact your airCFO representative. We are committed to maintaining transparent communication about our security practices while protecting the confidentiality of our specific security controls.
This document provides a high-level overview of airCFO's security practices. Specific security controls and procedures are subject to change as we continuously improve our security posture.