Security architecture

Protection begins with explicit boundaries.

Position keeps the authoritative ledger and encrypted originals on iPhone, minimizes AI context and requires confirmation before record changes.

On-device authority

Local database and ledger
Encrypted originals
Face ID or passcode lock
No hosted financial database
No bank credentials or transaction execution

Bounded processing

Certified layouts parse locally. Managed AI enforces access, model policy and credits without retaining request content after processing. BYOK sends directly from iPhone.

Confirmation and recovery

Uncertain evidence remains provisional. AI suggestions do not save themselves. Use iPhone backup or a password-protected Position archive; live sync is unavailable.

Back up or restore Position