Privacy policy
Last updated June 9, 2026
What this application stores
Cairn stores the data your firm puts into it: uploaded financial documents (tax returns, P&Ls, bank statements and similar), the structured data extracted from them, SDE worksheets and add-back decisions, firm branding, your per-user contact card, and the user and organization identifiers issued by the authentication provider. Nothing else is collected — there is no analytics tracking, advertising, or sale of data of any kind.
Third-party processing — read this part
Document content is sent to Anthropic's API to perform extraction; that is how the product reads a tax return. Requests are made server-side over TLS using your operator's API credentials. Authentication is processed by Clerk when enabled. No other third party receives your data. The current processor list is always visible in Settings → Security, served from the running system's own configuration.
Who can see your data
Every deal-scoped record is bound to your organization, and that boundary is enforced inside the database queries themselves — a request from another organization receives "not found", never your data and never confirmation the record exists. Within your organization, the firm chooses between open visibility (every member sees every deal) and private visibility (a deal is seen only by its owner and explicitly shared members).
Retention and deletion
Data persists until your firm deletes it. Deleting a deal removes its documents, extractions, worksheets, and add-back reviews; the stored file content itself is removed from disk as soon as no remaining document references it. Analytical records are append-only by design (revisions are kept for the audit trail) — deleting the parent deal removes the entire history.
Where it lives
All data resides on infrastructure operated by your firm's deployment (database plus document storage volume). Documents are encrypted at rest when the operator has configured the storage key — current status is shown live in Settings → Security, and this policy makes no claim beyond what that panel reports.
Questions: enterprise@narrowpathsystems.com · +1 (765) 697-8504 · Privacy · Security · Terms · Contact