Trust Center

How WealthPilot works

Three layers, kept separate on purpose. Verified data with provenance. Deterministic engines that turn your inputs into numbers. An AI layer that explains those numbers and is rejected if it invents its own.

Data sources

Market prices and history from configured market-data providers; digital assets from CoinGecko; ETF facts from issuer documents; Dubai fees from the Dubai Land Department service pages; mortgage limits from the CBUAE Regulations regarding Mortgage Loans (Circular 31/2013, as amended). Each record shows its provider, retrieval time and freshness. Live property transaction feeds activate only once the data licence is documented.

How calculations work

Compound growth uses annual effective returns with end-of-month contributions. Mortgages are fully amortising annuities. Fees come from a versioned schedule with sources and verification dates. Yields are itemised from gross to net. Stress tests apply declared shocks to declared sleeves. Every engine has automated tests.

How AI is used

AI writes explanations and answers coach questions. It cannot compute or recall market figures: every number must come from a tool that runs an engine or reads verified data. Outputs are checked for recommendation language and for figures not present in the inputs. Prompts receive numbers and IDs only.

How risk profiles work

Ten questions measure willingness (reactions, loss tolerance, return preference, behaviour) and ability (income stability, horizon, liquidity, dependants, reserve). Ability caps willingness. The result selects a framework, not an instrument.

What scenarios mean

A scenario recomputes the same projection with one changed assumption and shows the base case beside it. Rates are illustrative planning assumptions: 4%, 6%, 8% and 10%. None is a forecast.

Why projections are not guarantees

Markets do not deliver average returns in average years. Global equities have fallen 30–55% in bear markets; bitcoin has fallen more than 70% three times; Dubai property fell roughly 30% between 2014 and 2020. Projections show what constant assumptions imply, so you can compare choices, not predict outcomes.

When data was updated

Every module shows a timestamp per source. Reference facts carry the date they were checked. Provider health is monitored and shown to the operator.

Security approach

Supabase Auth with row-level security on every table; secrets only on the server; Stripe hosted checkout with signed webhooks and server-side amount verification; rate limits, daily spend caps, audit logs, a strict content-security policy and no card data on our servers.

Regulatory boundaries

WealthPilot is not licensed by the UAE Securities and Commodities Authority, VARA or the Central Bank to provide investment advice, and it does not broker property. Personalised recommendations, trade suggestions and execution are disabled by feature flags until licensed operation or a licensed partner is in place. You remain in control of every decision.

• PERSONALIZED_FINANCIAL_ADVICEOFF

  SCA (or equivalent) financial consultation licence, or a licensed partner agreement, plus suitability and audit-trail controls.

• CRYPTO_PERSONAL_ADVICEOFF

  VARA (Dubai) or SCA virtual-asset advisory licence.

• TRADE_RECOMMENDATIONSOFF

  Licensed advisory status and a documented recommendation methodology.

• AUTO_TRADINGOFF

  Portfolio management licence and broker integration agreements.

• BROKER_EXECUTIONOFF

  Broker partnership with regulatory approval for order routing.

• REAL_ESTATE_BROKERAGEOFF

  RERA brokerage licence (Dubai) or a licensed brokerage partner.

• SCA_ADVISORY_MODEOFF

  SCA licence category for investment advice.

• VARA_ADVISORY_MODEOFF

  VARA advisory licence.