Trust centre · Version 2026-10-18
How Wealth Locker handles data
Verified controls, named subprocessors, clear limits. No Australian-only storage or inference claim.
Access isolation
Supabase authentication and row-level security limit each account, adviser, and practice to authorised records.
Encryption
Providers encrypt traffic in transit and stored service data at rest. Card details stay with Stripe.
User control
Users control adviser scopes and can download original documents, export account data, or request account closure.
Privacy and data flows
Wealth Locker processes account information and uploaded documents for storage, extraction, notifications, adviser access, support, and billing. We disclose personal information, including uploaded documents, to providers outside Australia: database and document storage are in Singapore, and application functions that process each document run in the United States. Our AI, OCR and payment providers say they process information in the United States and, in some cases, other countries; the table below names each one. If your adviser works in a firm on Wealth Locker, the firm's admins can view and edit your Locker and the firm can move you to another adviser; see the Privacy Policy. Retention depends on service purpose, account status, user deletion requests, and provider contracts.
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database, object storage | Singapore |
| Netlify | Application hosting and serverless processing of documents | United States |
| Anthropic | AI extraction, validation, and analysis | Stored in the United States; processing may be routed to the United States, Europe, Asia and Australia |
| Google (Gemini) | AI analysis, where we use Gemini models | Any country where Google or its agents maintain facilities |
| OpenAI | AI document analysis, to retry a PDF our main provider cannot read | The United States, and other countries where OpenAI’s affiliates, partners or vendors are located |
| Datalab | OCR and document conversion when needed | The United States, and possibly other countries |
| Stripe | Subscription billing; card details never enter Wealth Locker database | The United States, and other countries where Stripe’s affiliates and sub-processors operate |
| Amazon Web Services | Email the app sends, and receiving documents forwarded to docs@wealthlocker.ai | Australia (Sydney); a forwarded document is then processed like any other upload |
AI processing notice
Supported documents may be sent to configured AI and OCR providers for classification, extraction, validation, summaries, or user-requested analysis. Wealth Locker minimises submitted context, records cost and quality telemetry, and does not treat model output as authoritative. TFNs must not be extracted or stored in Tax records.
Security or privacy question?
Contact team. Include account email, but never send password, authenticator code, recovery code, or full document by email.
Contact support