Outside Chair connects priorities, decisions, actions and outcomes in one shared workspace. Use it inside ChatGPT or Claude to see what changed, what is overdue and what remains untested. AI proposes; only you approve. Start free. Copilot is in private pilot.
I've been building a SaaS with Lovable + Supabase that handles pretty sensitive stuff bank data via Open Banking, tax-related info. It's still in beta with very few users, but I want to get security right before opening it up more.
I know the basics (HTTPS, not exposing API keys in the frontend), but I'm not confident I've covered what actually matters for something handling financial/tax data.
For anyone who's dealt with this:
What would you consider the absolute minimum before letting real users connect their bank accounts to something you built solo?