How your data is held
Isolation enforced by the database, brokerage access that is read-only by construction, and a build-time check on where the text you write is allowed to go. What follows is the posture actually in place — no security theatre, and no certifications geoGM does not hold.
Isolation at the database
Every table that holds user data is protected by row-level security in Postgres, so isolation is enforced by the database itself rather than by application code remembering to filter.
Where your text goes
Prompts, notes and documents you write only ever reach AI providers covered by an EU adequacy decision or standard contractual clauses. This is enforced by a check that reads the codebase on every build, not by policy alone.
Payments and brokerage
Card details are handled by Stripe and never reach geoGM. Brokerage connections go through SnapTrade, which owns the credential exchange — geoGM never sees a broker password.
Measurement without cookies
Product analytics are emitted server-side from a small closed set of events, with no device identifiers. There is no advertising pixel on this site.
Reporting a vulnerability
If you have found something, tell us before you tell anyone else and you will get a straight answer.
Write to geogm.org@gmail.com with enough detail to reproduce the issue. You will get an acknowledgement within 72 hours and an initial assessment within five business days.
There is no paid bug-bounty programme. Please allow reasonable time to fix an issue before publishing it.
Machine-readable contact details are published at /.well-known/security.txt following RFC 9116.
The posture, in six lines
The same six facts the home page shows. Each one is checkable on this page or in the code, and if one stops being true it is removed from both places at once.
Brokerages you can connect
Connections run through SnapTrade and are read-only by construction: geoGM reads positions and balances, never places an order and never sees a broker password. The list is SnapTrade's, by region, checked on the date below.
United States
- Alpaca
- Charles Schwab
- Citi
- E*TRADE
- Edward Jones
- Empower
- Fidelity
- Interactive Brokers
- J.P. Morgan (Chase)
- Moomoo
- PNC
- Public
- Robinhood
- TIAA
- TradeStation
- Tradier
- Transamerica
- US Bank
- Vanguard
- Webull
- Wells Fargo
- tastytrade
Canada
- BMO InvestorLine
- CIBC Investor's Edge
- Questrade
- TD Direct Investing
- Wealthsimple
- Webull Canada
Europe & UK
- AJ Bell
- BUX
- DEGIRO
- eToro
- Trading 212
Asia-Pacific
- CommSec
- Stake
- Upstox
- Zerodha
Crypto exchanges
- Binance
- Coinbase
- Kraken
Checked against SnapTrade's published integrations on 2026-08-27.
The documents behind this
The commitments summarised above are set out in full, in English and Spanish, with a real registered address and tax number.