Security & privacy
Built like it's holding your bank data. Because it is.
Every table is isolated per account at the database level. Secrets are encrypted at rest. The vault is encrypted before it ever leaves your device.
Row-level isolation
Every record is scoped to your account by database policy, not just app code. Another user's query can't return your rows.
End-to-end encrypted vault
Passwords are encrypted on your device with AES-GCM. The key is wrapped by your PIN and a one-time recovery phrase. The server only ever stores ciphertext, and there is no reset.
Tokens encrypted at rest
Google, Plaid and Strava credentials are stored encrypted and only unwrapped server-side to sync. Rotating the key forces a re-connect, by design.
Plaid handles the bank
You log in to your bank through Plaid. Axis receives an access token, never your bank credentials.
AI sees the minimum
The nightly digest reads your finances at category level only. Orbit can look up transactions when you ask about spending. Neither ever sees account numbers, balances, holdings, or the vault.
Calendar is read-only
Axis asks for read-only access to Google Calendar. It can show your events next to your plan; it can't edit or delete them.
Keep reading
The rest of the system.
Get started
One place for the whole week.
Your day, your systems, and your money on a single surface, with an assistant that already knows the context. Free during early access.
Google or email sign-in · Installs on any device · Delete your account any time