--- title: "Data Security: Read Only Access, NDA First | MarginFix" description: "How a MarginFix audit handles data security: NDA first, read only scoped access, no training on client data, and working data deleted within 30 days of close." url: https://marginfix.ai/security/ lastmod: 2026-10-12 --- Your number See this page in your own figures: industry, spend and the estimated leak. [Run the estimator →](/estimator/) [Home](/) › Data security Data security · reviewed Oct 2026 # Your accounts. Our access. Every rule, written down. The page for whoever in your company asks who exactly gets access to what. Short answers first, details below. - Security contact: [audits@marginfix.ai](mailto:audits@marginfix.ai) - DPA and mutual NDA by email within one business day - Signed off by Cristian Bragau - Median finding $58k a year across 74 audits 01 ## Three rules before any account is shared The short answers. Everything below is the detail behind them. 1. Rule 01 ### NDA before anything 2. Signed before a single account is shared. Yours or ours, signed within one business day. 3. Rule 02 ### Read only, scoped, logged 4. Viewer and analyst roles only, limited to the accounts in scope. We never hold admin rights and never make changes. 5. Rule 03 ### Gone at handover 6. Access revoked at readout; working data deleted within 30 days. Client data is not used for model training. 02 ## Four steps. No copies left behind. The data flow, end to end, from the roles you grant to the deletion you can verify. 1. Step 01 ### Your accounts 2. You grant viewer or analyst roles from your side. We never hold your passwords. 3. Step 02 ### Read only pull 4. Scoped API reads of the accounts in scope: aggregates and reports, never customer PII. 5. Step 03 ### Analysis 6. Audit files are maintained in MarginFix’s local working environment. Anonymized audit information is processed through the Claude API to assist analysis. Client data is not used for model training. A senior auditor reviews and approves every finding. 7. Step 04 ### Revoke and delete 8. Access revoked at your readout; working data deleted within 30 days after close. You can verify both. 03 ## What we access, exactly Systems accessed during the audit, the access level and what each is used for. | System | Access level | Used for | | --- | --- | --- | | GA4 / analytics | Viewer | Funnel and attribution | | Meta and Google Ads | Analyst (read only) | Spend efficiency | | Email / CRM (e.g. Klaviyo, HubSpot) | Read only | Lifecycle coverage | | Revenue (e.g. Shopify, Stripe, exports) | Reports only | Margin verification | | Customer PII | Never requested | Aggregates only | - NDA before data; DPA available on request - Read only, scoped access: no admin rights, no changes made - Client data is not used for model training - Working data deleted within 30 days after close - CCPA and GDPR rights honored at audits@marginfix.ai - Subprocessor table below; the full legal list ships with the DPA Cite this figure A MarginFix audit works NDA first with read only scoped access, anonymized analysis through the Claude API, no training on client data and deletion within 30 days. MarginFix, marginfix.ai/security/ 04 ## Who touches the data, and under what terms Every processor that can see anything you share with us, and the terms it works under. | Subprocessor | Purpose | Location | Terms | | --- | --- | --- | --- | | Netlify, Inc. | Website hosting and form intake | Global CDN, US | DPA and SCCs | | Zoho Corporation | CRM: lead and client records | EU (crm.zoho.eu) | DPA and SCCs | | Anthropic (Claude API) | AI assisted analysis of anonymized audit information | Per provider terms | Commercial API terms, no training on client data | | Google Workspace | Report delivery, client communication and call scheduling (Calendar and Meet) | EU / US | DPA and SCCs | | Google Tag Manager and Google Analytics 4 | Site analytics, after you accept optional cookies | EU / US | DPA, consent gated | | Google Ads | Advertising conversion measurement, after you accept optional cookies | EU / US | Google Ads Data Processing Terms, consent gated | | Microsoft Clarity | Session analytics, after you accept optional cookies | EU / US | DPA, consent gated | | Meta Platforms (Meta Pixel and Conversions API) | Advertising measurement and showing our ads to past visitors, after you accept optional cookies | EU / US | Meta data processing terms, consent gated | Current as of Oct 2026 · changes announced 30 days ahead to active clients · the full legal list ships with the DPA. 05 ## This website The controls on the site itself. Each one is a response header you can read, not a claim. - **Strict-Transport-Security** HTTPS only, one year, subdomains included, on the browser preload list. - **Content-Security-Policy** Hash strict: a script runs only if the build signed it. No inline handlers, frames from other sites refused, forms post to this origin only. - **Permissions-Policy** Camera, microphone, geolocation, payment and the other device APIs are switched off for every page. - **Cross-Origin policies** Opener and resource policies set to same origin; MIME sniffing off; referrers trimmed to the origin. Responsible disclosure: [/.well-known/security.txt](/.well-known/security.txt) names the channel and the policy. Check any response header in your browser's developer tools; nothing here depends on a badge. 06 ## Documents for your review Three documents cover most security reviews. Request any of them and it arrives by email within one business day. - [Mutual NDA (template) Yours or ours. Signed within one business day. Request it →](/contact/?topic=Privacy%20or%20security) - [Data Processing Agreement With the full subprocessor list and the retention schedule. Request it →](/contact/?topic=Privacy%20or%20security) - [Access and revocation checklist What we ask for, per system, and how you confirm it is gone. Request it →](/contact/?topic=Privacy%20or%20security) Every request lands on the contact form with the topic preset, or write to [audits@marginfix.ai](mailto:audits@marginfix.ai). Reply within one business day. 07 In their words What clients said after the readout. Every statement sits on a published case; open the case for the audited figure. 08 ## Questions before you grant access The ones security reviews ask first. If yours is not here, ask the person accountable for the answer. ### Do you need admin access to anything? No. Viewer or analyst roles, granted from your side, limited to the accounts in scope. We never hold passwords and never make changes in your accounts. ### Where is our data processed? Audit files are maintained in MarginFix’s local working environment. Anonymized audit information is processed through the Claude API to assist analysis. Client data is not used for model training. A senior auditor reviews and approves every finding. We do not claim a processing region we have not verified; the provider terms govern where the API runs. ### Is our data used to train AI models? No. Client data is not used for model training. Anonymized audit information is processed through the Claude API to assist analysis, and a senior auditor reviews and approves every finding. ### What happens to the data after the readout? Access is revoked at the readout. Working data is deleted within 30 days of close; where backups exist they are purged within 90 days. The retention schedule is on the privacy page. ### Can we use our own NDA? Yes. Send yours or ask for ours; either is signed within one business day, before any account is shared. ### Do you ever see customer level personal data? It is never requested. The audit works on aggregates, reports and exports; customer PII stays in your systems. ![Portrait photograph of Cristian Bragau](/assets/founder/cristian-bragau-2026-10.jpg) The auditor's note I run the audits on read only access, under NDA, and I am the person accountable for what happens to your data. Audit files stay in our local working environment, anonymized information goes through the Claude API for analysis, nothing trains a model, and everything is deleted within 30 days. Ask me before you grant access. **[Cristian Bragau](/about/cristian-bragau/)** Founder & Lead Auditor · 17 published cases · [LinkedIn](https://www.linkedin.com/in/cristian-bragau-828b8526/) ## Security cleared? Let’s find your margin. Fixed fee. 5 to 7 working days. $10k to $50k of findings, or your money back. [Book the audit](/book/) [Talk to an auditor](/book/call/) Fixed fee. No retainer. NDA first. Go deeper ## Read on from data security - [Privacy Policy What we collect, the retention schedule, your rights and every processor with its lawful basis.](/privacy/) - [Terms and Conditions The engagement, the findings guarantee, corrections, cancellation and which document governs.](/terms/) - [How it works The week, day by day: access, analysis, readout and the report.](/how-it-works/) - [FAQ The guarantee, data access, the timeline and what an audit does not cover.](/faq/) - [Contact Security questions, DPA and NDA requests. Reply within one business day.](/contact/) - [Case studies 74 anonymized audits across 9 industries.](/case-studies/)