What LasagnaFi stores, what actually reaches the AI, and how you can verify every part of it yourself.
Your name, institution and account numbers are tokenized before any prompt leaves your account, so the model never receives anything that identifies you. Balances, rates and dates pass through unchanged, because the answer depends on those numbers, and the tokens are resolved before the answer reaches your screen.
Your balances and rates go through untouched. Anything that names you does not.
Your accounts connect through Plaid with read-only scope, which covers balances, holdings and transactions. No payment, transfer or account change is possible through that connection, and your bank password is never shared with us.
All of LasagnaFi is open source, scrub layer included, so you can read exactly what happens to your data. Chat, insights and the planning tools all go through that one layer, and a test in the repo checks that nothing else calls the model directly.
export function scrub(input: Facts) { return { ...input, holder: token(input.holder), bank: token(input.bank), acct: token(input.acct), balance: input.balance, // untouched };}Identifying fields are swapped for codes, and swapped back on the way out.
it("never imports the model directly", () => { const direct = sourceFiles() .filter(f => f.imports("ai")) .filter(f => f !== "lib/llm.ts"); expect(direct).toEqual([]);});PASS 1 test, 0 failuresA test in the repo checks that no other file calls the model directly.
You can delete your account yourself from settings. It removes your connected accounts, balances, chat history and uploaded documents, and cuts the Plaid connection at the same time.
Connect one account and LasagnaFi generates your first list of actions in about five minutes. Free to start, and open source if you would rather self-host.