FinFlow — agentic wealth management platform

The brief was ambitious: build a platform capable of competing with global leaders by transcending the outdated paradigm of "manual entry plus PDF uploads". The future belongs to Agentic Wealth Management — an autonomous financial assistant that doesn’t just analyse data but takes routine tasks off the user. Open Banking integrations through Plaid, Salt Edge and Tink. Full multi-currency with historical rates. Investment portfolios, crypto, subscriptions. GDPR, CCPA, SOC 2 Type II. Five languages with regional tax adaptation.

Every transaction passes through a six-tier cascade, each tier producing a confidence score and the first match wins. User-defined regex rules sit at the top (confidence 1.0) — patterns set by a user have absolute priority. Below them: bank hints from MCC codes (0.95), built-in rules for popular merchants (0.6–0.9), a merchant cache that learns from prior runs (0.88), GPT-4o-mini for unknown cases (≥0.6), and a fallback.

GDPR’s right-to-be-forgotten is usually implemented as a recursive DELETE through a foreign-key graph — slow, error-prone, often impossible without breaking referential integrity. We chose a different primitive: every user gets their own AES-256-GCM key, all their data is encrypted at rest with that key, and erasure becomes a single operation — drop the key. The encrypted ciphertext can remain on disk forever; without the key, it is mathematical noise. Referential integrity stays intact, audit logs stay readable, deletion is provably instant.