Security

Your clients’ financial data is protected at every step.

Forecraft is built for financial professionals who are trusted with sensitive data. Here is exactly how we protect it.

Encrypted in Transit

All data transmitted between your browser and Forecraft is encrypted using TLS 1.3, the same standard used by major banks. No data travels over unencrypted connections.

Encrypted at Rest

Your client data is stored in encrypted databases with AES-256 encryption. Database access is restricted to Forecraft's servers only. No third party can query your data directly.

Your Data Is Never Trained On

Client financial data uploaded to Forecraft is never used to train AI models. Not Anthropic's, not Forecraft's, not anyone's. Your data is used only to generate your close pack and nothing else.

Workspace Isolation

Every client workspace is completely isolated. A user in one workspace cannot access data from another workspace, even within the same account. Access is verified on every request.

You Own Your Data

Every management pack you generate is downloadable as a standalone file. Cancel your subscription and your data exports completely. We do not hold your workflow hostage.

Secure Authentication

Forecraft supports two-factor authentication (2FA) and enforces secure session management. Failed login attempts are rate-limited to prevent unauthorized access.

Where your data lives

Forecraft runs on Vercel (hosting) and Neon(database) — enterprise-grade infrastructure used by thousands of businesses. Database connections are encrypted and access is restricted to Forecraft’s application servers only. Billing is handled by Stripe — we never store your card number or banking credentials.

Passwords are hashed with bcrypt (cost factor 12) before storage. OAuth tokens for QuickBooks and Xero integrations are encrypted at rest. Two-factor authentication (TOTP) is available for all accounts.

Found a security issue?

We take security reports seriously. If you discover a vulnerability in Forecraft, please email security@forecraft.tech before disclosing publicly. We will respond within 24 hours and work with you to resolve the issue responsibly.

For general data questions, see our plain-English data guide, Privacy Policy, and Terms of Service.

Last updated: June 9, 2026