Data security · reviewed
Your accounts. Our access. Every rule, written down.
The page for whoever in your company asks who exactly gets access to what. Short answers first, details below.
Three rules before any account is shared
The short answers. Everything below is the detail behind them.
- Rule 01
NDA before anything
Signed before a single account is shared. Yours or ours, signed within one business day.
- Rule 02
Read only, scoped, logged
Viewer and analyst roles on ad accounts and analytics only. Revenue, CRM and any regulated system reach us as aggregate exports your team pulls. We never hold admin rights and never make changes.
- Rule 03
Gone at handover
Access revoked at readout; working data deleted within 30 days. Client data is not used for model training.
Four steps. No copies left behind.
The data flow, end to end, from the roles you grant to the deletion you can verify.
- Step 01
Your accounts
You grant viewer or analyst roles from your side. We never hold your passwords.
- Step 02
Exports first, reads second
Your team pulls aggregate exports by source and month for revenue and CRM. We read ad accounts and analytics directly on viewer roles. Never a customer record.
- Step 03
Analysis
Audit files are maintained in MarginFix’s local working environment. Anonymized audit information is processed through the Claude API to assist analysis. Client data is not used for model training. A senior auditor reviews and approves every finding.
- Step 04
Revoke and delete
Access revoked at your readout; working data deleted within 30 days after close. You can verify both.
What we access, exactly
Systems accessed during the audit, the access level and what each is used for.
| System | Access level | Used for |
|---|---|---|
| GA4 / analytics | Viewer | Funnel and attribution |
| Meta and Google Ads | Analyst (read only) | Spend efficiency |
| Email / CRM (e.g. Klaviyo, HubSpot) | Aggregate exports your team pulls (by source and month) | Lifecycle coverage |
| Revenue (e.g. Shopify, Stripe) | Aggregate exports your team pulls (by source and month) | Margin verification |
| Loan, patient, cardholder or other regulated systems | Never connected | Aggregates only, exported by you |
| Customer PII | Never requested | Aggregates only |
- ✓NDA before data; DPA accepted before any personal data
- ✓Read only, scoped access: no admin rights, no changes made
- ✓Client data is not used for model training
- ✓Working data deleted within 30 days after close
- ✓CCPA and GDPR rights honored at audits@marginfix.ai
- ✓Subprocessor table below; the full legal list ships with the DPA
A MarginFix audit works NDA first with read only scoped access, anonymized analysis through the Claude API, no training on client data and deletion within 30 days.MarginFix, marginfix.ai/security/
Who touches the data, and under what terms
Every processor that can see anything you share with us, and the terms it works under.
| Subprocessor | Purpose | Location | Terms |
|---|---|---|---|
| Netlify, Inc. | Website hosting and form intake | Global CDN, US | DPA and SCCs |
| Zoho Corporation | CRM: lead and client records; email to you about your request or booking (ZeptoMail) | EU (crm.zoho.eu, cpaas.zoho.eu) | DPA and SCCs |
| Anthropic, PBC (Claude API) | AI assisted analysis of anonymized audit information | US provider; region per provider terms | Our own direct API account; no training on client data |
| Independent senior auditors | Audit analysis and signed findings, on the accounts in scope only | United States or Romania, named to you before access | Written confidentiality and data processing contract |
| Google Workspace | Report delivery, client communication and call scheduling (Calendar and Meet) | EU / US | DPA and SCCs |
| Google Tag Manager and Google Analytics 4 | Site analytics, after you accept optional cookies, or in the US unless you opt out | EU / US | DPA, consent gated (US: opt out) |
| Google Ads | Advertising conversion measurement, after you accept optional cookies, or in the US unless you opt out | EU / US | Google Ads Data Processing Terms, consent gated (US: opt out) |
| OpenAI Ads | Advertising conversion measurement for our ads in ChatGPT, after you accept optional cookies, or in the US unless you opt out | US | OpenAI advertising terms, consent gated (US: opt out) |
| Microsoft Clarity | Session analytics, after you accept optional cookies, or in the US unless you opt out | EU / US | DPA, consent gated (US: opt out) |
| Meta Platforms (Meta Pixel and Conversions API) | Advertising measurement and showing our ads to past visitors, after you accept optional cookies, or in the US unless you opt out | EU / US | Meta data processing terms, consent gated (US: opt out) |
| LinkedIn (Insight Tag) | Advertising measurement and showing our ads to past visitors on LinkedIn, after you accept optional cookies, or in the US unless you opt out | EU / US | LinkedIn Marketing Solutions terms, consent gated (US: opt out) |
Current as of Nov 2026 · changes announced 30 days ahead to active clients · the full legal list ships with the DPA.
This website
The controls on the site itself. Each one is a response header you can read, not a claim.
- Strict-Transport-SecurityHTTPS only, one year, subdomains included, on the browser preload list.
- Content-Security-PolicyHash strict: a script runs only if the build signed it. No inline handlers, frames from other sites refused, forms post to this origin only.
- Permissions-PolicyCamera, microphone, geolocation, payment and the other device APIs are switched off for every page.
- Cross-Origin policiesOpener and resource policies set to same origin; MIME sniffing off; referrers trimmed to the origin.
Responsible disclosure: /.well-known/security.txt names the channel and the policy. Check any response header in your browser's developer tools; nothing here depends on a badge.
Documents for your review
Three documents cover most security reviews. Request any of them and it arrives by email within one business day.
- Mutual NDA (template)Yours or ours. Signed within one business day.Request it →
- Data Processing AgreementAccepted before any personal data is shared. With the full subprocessor list and the retention schedule.Request it →
- Access and revocation checklistWhat we ask for, per system, and how you confirm it is gone.Request it →
Every request lands on the contact form with the topic preset, or write to audits@marginfix.ai. Reply within one business day.
In their words
What clients said after the readout. Every statement sits on a published case; open the case for the audited figure.
“Short version, we were about to cut the wrong thing. Glad we got this done first.”
$134k a year, read a year after a 6 day audit
Contribution margin on the two top campaigns: −7% → +9%
“Revenue grew and cash didn't. Victoria rebuilt margin per order after shipping, returns and payment fees, and our two biggest prospecting campaigns were losing money on every sale. We stopped scaling them.”
Victoria MillerLead auditor on this audit“Founder was on the kickoff call, the auditor who did the work ran the readout. Small thing but I've never had that with a consultancy before. You actually talk to the people who know the answers.”
$118k a year of wasted spend cut in 7 days
Rebates paid on volume never actually earned: 19% → 1%
“Rebate expense outran distributor volume and we could not see why. Cristian reconciled rebates paid against volume actually shipped and paid for, tier by tier: accruals had run off gross purchase orders. Quarterly true ups now catch it.”
Cristian BragauSenior Auditor · signed this audit off“The thing that won me over was a line in the report that basically said "we can't prove this one, so we're not counting it". Nobody does that. Made me trust everything else in there.”
$96k a year of wasted spend cut in 7 days
App installs that funded a real account: 24% → 63%
“Installs looked great and funded accounts stagnated. David followed sign ups through to funding, and the bonus was buying registrations from people who claimed it and never transacted. Incentives now pay on activation, not the download.”
David JacksonSenior Auditor · signed this audit off“I've paid for a few of these "audits" over the years and they usually end with a pitch. This one ended with a list of what to fix and which parts we could do ourselves. Some of it was not what I wanted to hear. All of it was right.”
$92k a year found in 7 days
Enterprise deal margin lost to quarter end: 5 pts lost → 0 pts lost
“Bookings hit target while margin slipped. Cristian split our discounting by timing and rep: concessions spiked in the last days of every quarter because buyers had learned to wait. Approval thresholds fixed it without losing deals.”
Cristian BragauSenior Auditor · signed this audit off“Solid work. Lost a star only because the first week dragged, mostly getting them access on our end so partly our fault. After that it moved fast and the readout was really clear.”
$88k a year of wasted spend cut in 7 days
Paid social proven to lift store visits: ~1 in 3 → 9 in 10
“Our CFO doubted that online ads drove store visits. David's matched market geo lift test proved the doubt right: footfall barely changed where the ads were off. The budget moved to markets and channels that passed the test.”
David JacksonSenior Auditor · signed this audit off$88k annual budget redirection identified in 7 days
Congress spend with a tracked return: 8% → 88%
“Six figures a year in congresses and KOL sponsorships, renewed on habit. Leslie tried to connect it to share of voice, engagement or prescribing and found no instrumentation at all. The unmeasurable part now funds engagement we can track.”
Leslie MartinSenior Auditor · signed this audit off$74k a year of wasted spend cut in 7 days
Courier bonuses paid into already full zones: 22% → 3%
“Incentive spend rose while service levels stayed flat. Alex matched bonus payouts against real time courier availability by zone: in dense areas we paid couriers who would have worked anyway. Bonuses now fire only where coverage is short.”
Alex PopSenior Auditor · signed this audit off$63k a year found in 6 days
Active users actually being billed: 93% → 99%
“Expansion lagged what we saw inside accounts. Victoria reconciled active users against billed seats: many customers used more seats than they paid for. Automated true ups now capture it, and nobody pushed back.”
Victoria MillerSenior Auditor · signed this audit off$62k a year found in 6 days
Qualified inbound calls that became bookings: 2 in 3 → 9 in 10
“Marketing hit every target and revenue stalled. Leslie followed our qualified calls into intake and about a third were dropped at busy times or never followed up. Fixing staffing and call handling converted demand we had already paid for.”
Leslie MartinSenior Auditor · signed this audit offQuestions before you grant access
The ones security reviews ask first. If yours is not here, ask the person accountable for the answer.
Do you need admin access to anything?
No. Viewer or analyst roles, granted from your side, limited to the accounts in scope. We never hold passwords and never make changes in your accounts.
Where is our data processed?
Audit files are maintained in MarginFix’s local working environment. Anonymized audit information is processed through the Claude API to assist analysis. Client data is not used for model training. A senior auditor reviews and approves every finding. We do not claim a processing region we have not verified; the provider terms govern where the API runs. Customer records are never requested, so none can reach it.
Is our data used to train AI models?
No. Client data is not used for model training. Anonymized audit information is processed through the Claude API to assist analysis, and a senior auditor reviews and approves every finding.
What happens to the data after the readout?
Access is revoked at the readout. Working data is deleted within 30 days of close; where backups exist they are purged within 90 days. The retention schedule is on the privacy page.
Can we use our own NDA?
Yes. Send yours or ask for ours; either is signed within one business day, before any account is shared.
Do you ever see customer level personal data?
It is never requested. Revenue and CRM reach us as aggregate exports your team pulls, by source and month; customer records stay in your systems.
Can you audit a lender, a clinic or a card merchant without touching regulated data?
Yes. Your team exports counts and dollars by source and month, we never connect to the system that holds the records, and the NDA is signed before the first export. The data processing agreement is accepted in writing before any personal data is shared, and the per system access checklist comes with it.
Security cleared? Let’s find your margin.
Fixed fee. 5 to 7 working days. $10k to $50k of findings, or your money back.
Fixed fee. No retainer. NDA first.
Go deeper
Read on from data security
- Privacy PolicyWhat we collect, the retention schedule, your rights and every processor with its lawful basis.→
- Terms and ConditionsThe engagement, the findings guarantee, corrections, cancellation and which document governs.→
- How it worksThe week, day by day: access, analysis, readout and the report.→
- FAQThe guarantee, data access, the timeline and what an audit does not cover.→
- ContactSecurity questions, DPA and NDA requests. Reply within one business day.→
- Case studies74 anonymized audits across 9 industries.→