Trust Center
Here is a plain statement of how we handle information and what we do not claim. We would rather be accurate than impressive, so this page is short on adjectives and long on what is and is not true today.
Why this page is written this way
Many companies publish a trust page full of badges and promises. Ours is deliberately plain. We are a small business, and we have not yet earned the kinds of certifications and attestations that larger suppliers advertise. Saying so is more useful to you than implying otherwise. If you are deciding whether to share information with us, you should know exactly what we do, what we agree in writing and what we are not able to claim. We will update the page as that changes.
Where things stand
- This website has no sign-in, no forms and no analytics. It does not collect personal data beyond what you choose to send us by email, phone or the booking calendar.
- Data handling for each engagement is agreed in writing before work starts, including who can see your data and where it is kept.
- We use your data only for the work you have asked us to do.
- We do not currently hold security certifications, and we do not claim any. We will list them here once we do.
What we say, and what we do not say
If something is not listed in the left column, please ask before you assume it.
| We say | We do not say |
|---|---|
| This site has no forms, sign-in or analytics | That we are certified or audited by any third party |
| Data handling is agreed in writing for each engagement | That any particular standard or framework is met |
| We use your data only for the work requested | That our systems cannot be breached |
| Access is limited to what the work needs | That any AI tool is always accurate |
| We will tell you honestly whether we can meet your requirements | That we can meet requirements we have not checked |
How we approach your information
Our starting rule is to take as little as the work needs. Before an engagement begins, we write down what systems and data we will see, why we need them, who on your side and ours can reach them, how long we keep anything and what happens when the work ends. Access is limited to those needs and nothing more. If a task can be done with sample or redacted data, we prefer that. If we need to work on live records, we say so, and you decide. We do not ask for passwords by email, and we ask you not to send them.
R&D tax credit data
Where our R&D tax credit tools handle financial and payroll records, controls over access and storage are set out with each partner and client. Details of TaxTrex and creditARMOR terms come from Swanson Reed and are confirmed with each partner. This site does not state how those products store or protect data, because those details are for Swanson Reed to describe, and we will not guess.
AI tools and your data
AI tools raise particular questions: where information is sent, whether it is kept, whether it might be used to train a model and who at the supplier can see it. These differ between suppliers and between plans. When we recommend or use a tool on your behalf, we tell you what we know about its data terms, and we prefer options that keep your information out of general training. We cannot promise what a third-party supplier does beyond its published terms, so we encourage you to read them, and we are happy to go through them with you.
Questions worth asking any AI supplier, including us
Ask for written answers. A supplier who cannot answer clearly is telling you something.
- Which of our information will the tool see, and where is it sent?
- Is it kept, for how long and for what purpose?
- Is it used to train or improve models?
- Who at the supplier can see it?
- What happens to it when we stop using the service?
- What certifications or audits can the supplier actually show?
How we handle a security or privacy requirement
- 1
Tell us early
Mention any requirement on the first call: a client contract, a regulation, an internal policy.
- 2
We check what we can meet
We look at what the work involves and tell you honestly whether we can meet it.
- 3
We write it down
If we can, the requirement becomes part of the written scope. If we cannot, we say so and suggest alternatives.
- 4
We review as we go
If something changes, we tell you, and we update the agreement.
What you can expect if something goes wrong
No supplier can promise that nothing will ever go wrong. What we can commit to is how we behave. If we discover a problem that affects your information, we will tell you promptly and plainly, say what we know and what we do not, and help you decide what to do. We will not hide it, and we will not claim it was something else. We will also tell you what we change to prevent a repeat. The specifics of any commitment about timing and process are agreed in writing for each engagement.
Questions
If your business has security or privacy requirements, tell us on the first call. We will tell you honestly whether we can meet them. You can also email hello@cost.guru or call (480) 696-8863 with specific questions, and we will answer them in writing where we can.
Trust questions
Do you hold SOC 2 or ISO certifications?
No. We do not hold security certifications and we do not claim any. We will list them here once we do.
Does this website track me?
This site has no analytics and no forms. It does not collect personal data beyond what you choose to send us.
Can you sign a confidentiality agreement?
Please ask on the first call. We would read yours and say what we can agree.
Where is my data kept?
That is agreed in writing for each engagement, including where it is kept and who can see it.
What if my industry has special rules?
Tell us early. We will say honestly whether we can meet them, and suggest a professional if you need legal advice.
Keep exploring
Plan Your AI: Find Where AI Saves You Money
A short, honest look at where AI would pay off in your business, before you spend on building it.
Learn moreCustom AI Development Services
When a kit or ready-made agent will not fit, we design and build the solution around your process, quoted up front.
Learn moreLaunch Kits: Start for Less Than a Custom Build
Ready-built starting points with a fixed scope that you set up and run, for a fraction of the cost of a custom build.
Learn moreGuru Platform: Pay-As-You-Go AI Agents
Ready-made AI agents for common jobs, set up for you and billed monthly, with no large build bill.
Learn moreFind out what AI would cost you
Book a free call. We will map three opportunities and give you a rough idea of cost and payback.