Zero Data Retention
TLS 1.3
No PII Required
What data leaves this page?
Only the proposal payload you generate or load. The Worker receives plan-design output and renders a PDF. No SSNs, addresses, or other PII are required by the schema.
Where is the rendering done?
Cloudflare Workers Browser Rendering, in-region. Proposals are streamed back as PDF bytes; nothing is persisted on the Worker. Save to Vault writes only metadata + Box.com links to the advisor's CRM.
Origin allowlist
Render requests are gated by a strict ALLOWED_ORIGINS list on the Worker. Only authorized (k) Suite SPAs can call /render.
More detail
A full Security & Trust Center modal (5 tabs · AI provider · data flow · compliance · FAQ) ships with the next (k) Suite release. This is the v0.1 disclosure.