Data separation

We never sell or share your people.

Savology provides financial planning to the members of organizations — employees, plan participants, and advisors' clients. Savology also introduces households to financial advisors. Those two businesses never touch.

The planning we deliver for organizations serves their members. The introductions we make for advisors come only from households we found through our own marketing. The first group is never the source of the second.

This page explains where the line is, how it is enforced, and what we audit — in plain English, written to be forwarded to a compliance team.

The short version

Employees are not leads. Clients are not leads. Introductions come only from households Savology found itself.

If you are an employer or plan sponsor

Your employees are not in the introductions pool. They are not sold, not shared, not listed, and not marketed to by advisors on our behalf. Non-enrollment is the baseline — the only door is an employee choosing an introduction themselves, from inside their own account. Your organization also never sees or stores anyone's personal finances; you get aggregate participation, nothing more.

If you are an advisor or firm

Your clients and prospects stay yours. Nobody you invite onto the platform is ever introduced to another advisor or offered for sale, and working with us never requires you to upload a client list or connect a CRM. We could not sell what we do not have.

Who is never in the introductions pool

Anyone who joined through an organization

A company code, a benefits link, a retirement plan, a firm's own sign-up link — however they arrived, if an organization brought them to Savology they are excluded, no matter how engaged they are or what their report card shows. Only that individual can change it, for themselves, from their own account.

Anyone who has not agreed to it

An introduction requires the household's own consent, given in terms that say so plainly. Consent is a condition checked at the moment of every introduction, not a box buried at sign-up, and it can be withdrawn at any time.

Anyone already introduced

One household, one advisor. There are no shared lists and no auctions — the moment an introduction is made, that household is out of every other channel we run.

Anything from your side of the wall

We do not read, price, list, or resell an advisor's book or an employer's roster. There is no reverse flow, which is why there is nothing for us to be tempted by.

How it is enforced

Four mechanisms, not four promises.

1. Separate systems

The introductions system runs on its own database with its own credentials — not the platform database where organizations' plans live. It cannot reach into an organization's account data.

2. Tested on the way in, not filtered at the end

A household is only copied across if they arrived through one of Savology's own funnels. An organization-sourced account is therefore never written into the introductions system at all — there is no hidden copy of it waiting for a filter to hold.

3. Consent and exclusivity, checked every time

Current consent, not already introduced, not already routed elsewhere — rechecked against live data at the moment of every introduction rather than assumed from a cached list.

4. We audit it

We check the boundary on an ongoing basis: every account the introductions system can see is tested against organization membership, so a violation would surface as an exception rather than sit unnoticed.

For your compliance team

The questions below are the ones we are actually asked in RFPs and vendor reviews, answered at the level a public page should answer them. Detailed security documentation is available in a direct exchange.

Data ownership

The participant owns their data. Savology is the custodian and processor, and we do not sell it. Our handling of nonpublic personal information is described in a Regulation S-P whitepaper, available for review.

Advice and fiduciary status

Savology does not provide investment advice, does not manage assets, and does not act as a fiduciary. The platform is financial education and planning. There are no fiduciary conflicts to disclose.

Communications standards

Advisors' use of Savology falls under their own supervision of communications with the public — FINRA Rule 2210 for registered representatives. The platform contains no performance promises and no product pitches, and the materials an advisor shares are available to their compliance team for review before use.

Security posture

Data is encrypted in transit and at rest. Savology operates an ISO 27001-aligned information security program. Security policies, a certificate of insurance, and audit details — including testing schedules — are shared directly with reviewing teams rather than published here.

If your review needs something this page does not cover, ask — pre-answering the next team's question is how this page got written.

Common questions

You also sell introductions to advisors. Could our employees end up there?

No. Introductions come only from households that found Savology through our own marketing — our ads, our free report card, our own campaigns. Anyone who joins Savology through your organization is excluded from that pool, and we never sell or share their information. The only way one of your people is ever introduced to an advisor is if that person opts in themselves, from inside their own account — as our privacy policy’s Employer-Channel Users data firewall states, non-enrollment is the baseline and there is nothing for you or your employees to opt out of.

If I bring my clients onto the Savology platform, can another advisor be introduced to them?

No. Your clients, your prospects, and anyone you invite onto the platform belong to your firm. They are never introduced to another advisor, never listed, and never sold. Using the platform does not require you to give us a client list or connect a CRM.

Where do the households in the Advisor Matching Program come from?

Savology generates them itself. People come to us for a free financial report card, complete it, and agree to terms that say plainly that Savology may connect them with a financial professional. Consent is a condition of every introduction, and it can be withdrawn at any time.

How is the separation enforced — policy, or something stronger?

Something stronger. The two run on separate databases with separate credentials, and a household is only ever copied into the introductions system if they arrived through one of Savology’s own funnels — the test happens on the way in, so an organization-sourced account is never written there at all. We audit that boundary on an ongoing basis.

Does an employer or plan sponsor ever see an employee’s finances?

No. Organizations see aggregate participation only — how many people have built a report card. Each report card and plan belongs to the individual, and there are no payroll integrations or data feeds to set up in the first place.

Who owns the participant’s data?

The participant does. Savology holds it as a custodian and processor on their behalf, and we do not sell it. Employees, plan participants, and advisors’ clients all own their own report card and plan.

Does Savology provide investment advice or act as a fiduciary?

No and no. Savology is an education and planning platform — it does not recommend investments, does not manage money, and does not act as a fiduciary. There are no fiduciary conflicts to disclose because there is no advisory relationship to conflict with.

Are there product sales inside the platform?

No. Inside an organization’s program the platform is education and planning — there is nothing for sale in it, and nobody sells to your people through it.

Is data encrypted?

Yes — in transit and at rest. Savology operates an ISO 27001-aligned information security program, and security policies, a certificate of insurance, and a Regulation S-P whitepaper are available for compliance review.

This page describes how we work; our privacy policy and terms of service are the governing documents. If anything here is unclear, or your compliance team needs a wording tightened, tell us and we will fix it or explain it.

Talk to us about your organization

Where to next

This page is one boundary of a larger platform. The rest of it:

For employers

What a financial wellness benefit looks like when there is nothing to enroll in and no employee data to handle.

For advisors

The report card across your practice — and the Advisor Matching Program, built on the separation this page describes.

The glossary

Plain-English definitions for every term we use — fiduciary, report card, mass affluent, and the rest. Our household research shows the data behind them.