Skip to main content
Back to FixMy.Money

Security and feature-containment status

Current status as of September 1, 2026

Production-readiness remediation is in progress

Database row-level-security and workspace-isolation controls are undergoing a separate controlled reconciliation. This page does not claim that work is complete.

Active containment controls

  • Raw credit-report files are not sent to external AI providers.
  • The generic AI proxy is disabled and fails closed.
  • Automatic purchase restoration is permanently removed and cannot change entitlement.
  • Client document uploads are disabled until private storage controls are complete.
  • Additional workspace creation and switching are disabled during authorization review.

Service providers currently in use

Supabase provides database and authentication infrastructure. Stripe processes FixMy.Money subscription checkout and billing. Google Analytics may process product-usage analytics when enabled. External AI processing of credit-report files is disabled during containment.