Privacy notice

Public website

The Exabasis website is static and uses no advertising trackers, analytics SDKs, contact forms, or nonessential browser cookies. Our hosting providers process ordinary request and security logs to deliver and protect the site. When you email us, we and our email providers process your address and message so we can respond.

Account and access information

Exabasis processes information that identifies authorized users, establishes their workspace authority, and protects account access, including:

• email address, name, account status, workspace membership, and role;
• workspace-registration, invitation, verification, recovery, and session records;
• password hashes, hash-only bearer credentials, encrypted multi-factor secrets, security events, and rate-limit records; and
• the terms version accepted for each workspace and account preferences.

Workspace information

The service processes the records your organization supplies and creates while completing annual basis work, including:

• entities, tax classifications and elections, ownership facts, assets, source-package references, and dated basis events;
• opening positions, rule-pack versions, exact-decimal projections, shareholder-basis and activity-limitation records;
• annual-close evidence, review assignments and comments, workpapers, approved releases, and audit records; and
• operational records used to maintain reliability, correctness, and security.

How information is used

We use this information to operate and secure the service, authenticate users, resolve current permissions, perform requested calculations, preserve source and decision lineage, support review and release, communicate about access, and investigate reliability or security events. Workspace Owners control membership and role assignment. Exabasis does not sell workspace data or use it for advertising.

Service providers and retention

Hosting, email, and other service providers process information for Exabasis as needed to operate and protect the service. We retain information for the period needed to provide the service, meet an applicable agreement or legal obligation, resolve disputes, and preserve security and audit evidence.

Production and regulated data

Before submitting production, client-confidential, or regulated information, your organization and Exabasis must have a written agreement covering the security, retention, deletion, location, subprocessor, and transfer requirements that apply to that information.

Questions and requests

Contact privacy@exabasis.com with a privacy question or request. Applicable rights and response obligations depend on the relevant jurisdiction and any separate written agreement.