Tracelight
AI co-pilot for Excel-based financial modeling that generates formulas, audits models, and accelerates complex spreadsheet analysis for finance teams.
Tracelight is an AI-powered assistant for financial modelling in Excel that enables users to build models via natural language, automate workflows, detect formula errors, and apply professional formatting to spreadsheets. It is delivered as a Microsoft Office add-in available through AppSource.
The platform offers tiered plans from a free trial through Pro ($40/month) and Max ($200/month) to Enterprise with custom pricing. Features include premium LLM access, error-checking runs, and the ability to connect to custom internal LLMs. Enterprise customers get unlimited usage, SSO, and dedicated support.
Tracelight is SOC 2 Type 2 certified, ISO 27001 compliant, and GDPR compliant. The platform supports SAML 2.0 SSO via Okta and Microsoft Entra ID, offers end-to-end encryption, BYOK (Bring Your Own Key) support, custom data residency options, and zero data retention with contractual agreements that customer data is never used for model training.
Tracelight uses third-party LLM services (OpenAI, Anthropic, Google) for processing. While the DPA states customer data
No training opt-out mechanism was identified in the legal documents.
Moderate risk. Suitable for internal data but avoid confidential information.
Tracelight uses third-party LLM services (OpenAI, Anthropic, Google) for processing. While the DPA states customer data is processed to provide services, there is no explicit prohibition on training. The use of multiple LLM providers with broad processing activities creates moderate risk that user content could be used for model training.
“OpenAI OpCo, LLC...Processing Activities: LLM services; Anthropic PBC...Processing Activities: LLM services; Google LLC...Processing Activities: LLM services”
The DPA indicates Tracelight processes Customer Personal Data and Usage Data as an independent controller for feedback and usage information. While the agreement doesn't explicitly grant broad training licenses, the independent controller status over Usage Data and Feedback creates moderate licensing risk for user-generated content.
“Tracelight shall act as an independent controller with respect to its processing of...any personal data in Usage Data and Feedback”
Data is shared with multiple third-party subprocessors including OpenAI, Anthropic, Google, AWS, and others for LLM and cloud services. While these are documented in the Subprocessor List and require advance notice, the extensive sharing with AI service providers creates moderate risk for shadow AI exposure.
“Tracelight shall engage those third party processors ('Subprocessors') identified on Tracelight's Subprocessor List from time to time...OpenAI...Anthropic...Google LLC...Amazon Web Services”
The Privacy Policy clearly states data retention is limited to 12 months since last interaction, with secure disposal thereafter. Users have rights to erasure and data deletion. The policy explicitly addresses retention periods and deletion procedures, demonstrating strong data minimization practices.
“We will only hold your personal information for a period of 12 months since your last interaction with us, unless we are required or permitted by law to hold it for longer”
The DPA clearly establishes that Customer is the controller of Customer Personal Data and retains ownership. The agreement does not claim ownership over user-generated content or outputs. IP ownership remains with the customer.
“Customer shall be the controller of Customer Personal Data and Tracelight shall be Customer's processor of such Customer Personal Data”
The documents reference compliance with UK GDPR, Data Protection Act 2018, and EU GDPR. However, no specific certifications (SOC2, ISO 27001, HIPAA) are mentioned in the provided text. The company demonstrates GDPR compliance but lacks evidence of broader security certifications.
“Tracelight shall comply with European Data Protection Laws when processing Customer Personal Data in connection with the Agreement”
Integrations
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai