Scope access
Firm, advisor and client roles limit who can see each engagement and its records.
Security
The Analyst uses firm and client access controls, encrypted Australian Azure storage and task-scoped AI processing. This overview is based on controls checked against production on 8 September 2026; request the current detailed Security Information Brief for a security review.
Illustrative workflow · Advisor judgement stays in the loop
The workflow
Firm, advisor and client roles limit who can see each engagement and its records.
Customer data is stored in Azure Australia and encrypted in transit and at rest.
Analytical AI requests are task-scoped rather than sending the whole client dataset to one provider.
Data handling
The September 2026 security one-pager records firm-level isolation, client-scoped access and private Azure storage. It also describes paid AI-provider arrangements under which customer data is not used to train models. Australian storage does not mean every AI-processing step is performed in Australia.
Assurance status
The Analyst's SOC 2 Type II and ISO 27001 work is in progress. Azure and AI providers hold their own certifications; those are not certifications of The Analyst. For a procurement review, ask for the current Security Information Brief.