Beta version ยท last updated October 2026.
Ask BankCFO collects account information you provide, such as your name, email address, job title, bank or organization name, and optional FDIC certificate. The hosted workspace also stores cloud-safe settings and workflow records such as peer groups, report templates, snapshots, alert rules, opportunity scenarios, public FFIEC driver data imported into your workspace, audit events, and AI usage metadata.
The current application intentionally keeps certain manually entered internal deposit/product rows, report commentary, and rendered report archives in the browser rather than syncing them to the hosted workspace. Review the Security & Trust Center before entering information your institution treats as confidential.
When hosted AI is enabled and you use BankCFO Assistant, the application sends your question, recent chat context, and an explicitly constructed application context to the configured model provider. The application is designed not to automatically attach browser-local internal deposit/product rows, report commentary, or report archives. Core deterministic analytics remain available without hosted AI.
Information is used to provide and secure the service, operate your workspace, troubleshoot issues, improve the beta, understand usage, respond to support requests, and administer trials. Ask BankCFO does not sell user personal information for advertising.
The application uses a secure session cookie for authentication. Session tokens are stored server-side as hashes.
Most analytical bank data comes from public FDIC and FFIEC sources. Importing a public FFIEC Call Report ZIP into a workspace does not convert that regulatory data into confidential bank information.
Formal self-service account deletion and retention controls are still on the beta roadmap. Until then, requests to delete or correct account information can be submitted through the Contact page. Operational records may be retained as needed for security, troubleshooting, legal obligations, and recovery.
The application uses third-party hosting/database infrastructure and may use a hosted AI provider when that feature is enabled. A production subprocessor list and contractual data-handling evidence will be maintained as part of the vendor-due-diligence package before broad commercial launch.
Questions about privacy or bank vendor due diligence can be submitted through Contact & Feedback.