Solon suggests. You decide. Language models do not get a live connection to your books. We do not use your books to train public models. AI output is not tax, legal, or accounting advice. A person in your organization must approve bookings, payments, and filings.
1. Principles
- You stay in control. AI proposes. A human in your organization confirms.
- Minimum data. We send only what a specific question needs.
- No live books access for models. External models do not query your database.
- No training on your data. Our business API terms require the vendor not to train on those requests.
- Honest labels. We tell you when a suggestion or extract came from AI.
2. What Solon does today
- Chat. Bank records go only through the privacy shield. Incoming: date, amount, and description; no sender name and no sender account. Outgoing: person names become tokens; a company payee name may pass; IBANs and US account numbers are always tokens. Your organization name and your own accounts are stripped. You see the exact shielded records and approve each send. Decline means no send. We keep a gzip copy of the prompt as sent for 24 months, plus a log (who, when, IP, unique file name). That copy is not your 7-year books. This is pseudonymization with residual risk, not anonymization. A rare amount plus date plus memo can still identify a household. The model has no live connection to your database.
- Receipt OCR. When you or a claimant upload a receipt, we may send that file to OpenAI Vision only to read text, amounts, and dates. Nothing is booked until a person confirms.
- Matching rules and categorise. Same privacy shield and the same per-send approval as chat. The purpose differs: Solon suggests matching rules from history. You see which transactions would leave and the exact shielded records. No vendor call until you approve. Then the same 24-month archive. A person in your organization reviews and accepts before a rule is saved or a line is booked. No silent booking.
- Form 990 pack prep. In this version, pack preparation does not add a separate generative draft path. Pack ready is not IRS accepted. If we later add generative US pack drafts, we will update this page first.
Providers are listed in the Data Processing Agreement. Approved chat and matching-rule prompts, and receipt files sent for OCR, go to OpenAI. EEA customers contract with OpenAI Ireland Ltd. Processing may occur in the United States. That is personal data, not anonymization. The transfer tool is the OpenAI Data Processing Addendum (Standard Contractual Clauses), not the EU-US Data Privacy Framework.
3. What it does not do
Not advice
Output can be wrong or incomplete. Check it before you rely on it for a board, a donor, or a filing.
Not a silent bookkeeper
We do not let the model post, pay, or publish on its own. Dual control in the product is still your governance.
Not a significant automated decision about a person
We do not use Solon on our own behalf to hire, fire, lend, house, or deny a consumer a similar significant decision. If California ADMT rules later cover a new use, we will add notice and choice before that use goes live.
Not a substitute for Form 990 judgment
You (or your CPA) choose the form, eligibility, and what you file with the IRS.
4. Rules we follow
The FTC can act if AI claims are unfair or deceptive. We describe Solon as assistive, not as a certified accountant. California’s automated-decisionmaking rules (CPPA, effective 2026, with later compliance dates for some duties) apply to covered businesses that use ADMT for significant decisions. We designed Solon so a human remains in the loop for money and filings. If that design changes, this policy changes first.
If we ever offer the product in a way that the EU AI Act covers (transparency for interacting with AI), we already label Solon as AI. We do not claim the product is a high-risk AI system under that Act.
5. Your control
You choose how much your team uses Solon. You remain responsible for what you accept. Questions: contact page, Privacy Policy, or how we secure data.
Tutelium is offered by Tutelium Corp., a Delaware corporation. EIN 42-4484663. Delaware registered office: 8 The Green, Suite B, Dover, Delaware 19901.