Private-preview notice. This page describes the implemented security foundation and requirements for upcoming connections. It is not a certification or warranty.
Household isolation
Authenticated requests are authorized against active household membership. Private document storage, database policies, and backend checks are designed to prevent records from crossing household boundaries.
Private document processing
Documents use private storage and time-limited upload access. Application logs are designed to redact credentials, personal email addresses, document contents, filenames, and storage paths.
Source-grounded intelligence
Document answers cite the household evidence used. Dates, balances, reminders, and comparisons remain deterministic where possible rather than relying on generated guesses.
Read-only first
The initial HavenAhead assistant is restricted to existing read-only household capabilities. It cannot transfer money, pay bills, purchase a policy, or make an external commitment.
Future connections
Every provider connection must use the narrowest practical permission scope, show sync freshness and health, support revocation, and define deletion behavior. Provider credentials and tokens remain server-side and encrypted.
Report a concern
Security reporting contact details will be published before general availability. During private development, use the support path provided directly by the HavenAhead team.