Security

Your family's data stays with your family.

Neo is deployed into a cloud account your business owns, in an Australian region. Data is encrypted at rest and in transit, and sensitive details are tokenised before any AI model sees them. Nothing is used to train AI models.

Australian data residency AES-256 encryption at rest TLS 1.2+ in transit Sensitive data tokenised SOC 2 Type II and ISO 27001 certified infrastructure Never used to train AI
Architecture

Everything sits inside your walls.

Your documents, your warehouse and the keys that re-identify your family all live in your cloud account. Only tokenised data crosses the boundary, and only through gates you approve.

Tokenisation

AI sees the numbers, not the family.

Before any document reaches an AI model, Neo replaces the details that identify your family with tokens: names, account numbers, trusts, entities and addresses. The model still does the work on the numbers. The mapping back to real names lives in a vault in your account, and only your authorised people can see it.

  • Family members, beneficiaries and trustees
  • Bank, broker and custodian account numbers
  • Trusts, companies and holding entities
  • Addresses, tax file numbers and contact details
MCP integration

Use your data in the AI assistant you already use.

Neo includes a secure Model Context Protocol (MCP) connector, so your team can ask questions of the portfolio from Claude, ChatGPT or Microsoft Copilot. The assistant never gets a copy of the warehouse. It asks Neo, and Neo answers within the permissions you set.

  • Read-only by default. Assistants cannot change data
  • Scoped per person: each user sees only their entitlements
  • Tokenised responses, re-identified only for authorised users
  • Every query logged, and access revocable in one click
Our commitments

Security built in, not bolted on.

Agreed with your IT and compliance people before anything is built, and written into the engagement.

Hosted in Australia

Your data is stored and processed in an Australian cloud region.

In your own account

The warehouse belongs to your business. You hold the keys, not us.

Encrypted everywhere

AES-256 at rest and TLS 1.2 or higher in transit.

Tokenised sensitive data

Identities are swapped for tokens before any AI model sees a document.

Never used for training

Your data is never used to train AI models, by us or by any AI provider.

Least-privilege access

Role-based permissions and multi-factor sign-in, set and changed by you.

Approved sources only

Neo reads only the inboxes, folders and systems your team approves.

Every action logged

Runs, queries, edits and approvals are recorded and kept in your account.

Standards

Deployed on independently certified infrastructure.

Neo runs in your account on AWS, Microsoft Azure or Google Cloud in an Australian region. Each is independently audited against the standards your board and auditors expect.

SOC 2
Certified infrastructure

SOC 2 Type II

Independent audit of security, availability and confidentiality controls at the infrastructure layer your warehouse runs on.

ISO
27001
Certified infrastructure

ISO 27001

The international standard for information security management, held by the cloud region hosting your data.

APP
Designed to align

Australian Privacy Principles

Collection, storage and use of personal information designed around the Privacy Act and the APPs.

See it on your portfolio

Bring last quarter's statements. Leave with one view.

A 30-minute demo of Neo using the kinds of documents your office already receives. No slides.