FM
Sign InGet Started

API & Extensibility Statement

Programmatic access availability, governance, and requirements.

Enterprise ITSecurityProcurement

1Overview

FinanceModel provides programmatic access to enable enterprise integrations and data exchange workflows. API access is controlled, permissioned, and governed to ensure security, compliance, and platform integrity.

Platform Positioning

  • Enterprise-focused: API access is designed for organizational integration needs, not general developer experimentation.
  • Controlled access: Access is granted through an approval process, not self-serve.
  • Security-first: All API interactions are authenticated, authorized, and audited.
  • Governed: Usage is subject to organizational policies and platform terms.

2Current API Availability

API access is available on a limited, controlled basis for qualifying enterprise customers. The following summarizes current availability:

CapabilityStatusNotes
REST APIAvailableEnterprise plans only. Approval required.
Public Developer PortalNot AvailableAPI access is provided case-by-case
Self-Serve API KeysNot AvailableKeys provisioned through approval process
WebhooksPlannedEvent-based notifications under evaluation
Public SDKsNot AvailableNo client libraries are publicly distributed

Documentation Status

API schemas and endpoint documentation are not publicly available. Approved integrators receive documentation as part of the onboarding process.

3Intended Use Cases

API access is designed to support specific enterprise integration scenarios. The following use cases are appropriate for API access requests:

Appropriate Use Cases

Enterprise System Integration

Connecting FinanceModel with internal ERP, data warehouse, or reporting systems.

Data Exchange Workflows

Automating data transfer between FinanceModel and approved organizational systems.

Internal Tooling Connections

Building internal applications that interact with FinanceModel on behalf of authorized users.

Compliance & Audit Extraction

Extracting audit logs or compliance data for organizational record-keeping.

Not Intended For

  • General developer experimentation or prototyping
  • Building competing or redistributed products
  • High-frequency automated trading or algorithmic access
  • Bulk data scraping or extraction beyond approved scope

4Access & Governance

API access is governed by organizational policies and requires explicit approval. The following outlines access requirements and governance principles:

Access Requirements

1

Enterprise Plan Required

API access is only available to customers on enterprise-tier plans.

2

Use Case Review

All API access requests are reviewed to ensure appropriate use.

3

Security Assessment

Certain integrations may require security review before approval.

4

Agreement Acceptance

API usage is subject to API terms and acceptable use policies.

Governance Principles

Org-Scoped Access

API credentials are tied to your organization.

Permissioned Actions

Actions are limited to authorized scopes.

Audit Trail

All API activity is logged and auditable.

Revocable

Access can be revoked for policy violations.

5Security & Rate Limits

All API access is secured and subject to usage controls. The following security measures and rate limiting policies apply:

Security Controls

Authentication Required

All API requests must include valid authentication credentials (API key or OAuth token).

Least-Privilege Access

API credentials are scoped to the minimum permissions required for the approved use case.

Encrypted Transport

All API traffic is encrypted via TLS. Unencrypted connections are rejected.

Credential Rotation

API credentials can be rotated at any time. Periodic rotation is recommended.

Rate Limiting

Rate limits are enforced to ensure platform stability and fair usage across all integrators. Specific limits are communicated during the onboarding process and may vary based on use case and plan tier.

Rate Limit Handling

  • • Requests exceeding limits receive standard HTTP 429 responses
  • • Retry-After headers indicate when requests can resume
  • • Persistent violations may result in access review

For platform security details, see our Security Documentation.

6Limitations & Expectations

API access is provided within specific boundaries. The following limitations and expectations apply to all API integrations:

Platform Limitations

!

Not a Public Developer Platform

FinanceModel does not operate as a general-purpose API platform. Access is restricted to approved enterprise use cases.

!

Not Guaranteed for All Customers

API access is evaluated on a case-by-case basis. Meeting enterprise tier requirements does not guarantee access.

!

Subject to Change

API capabilities, rate limits, and access policies may change. Changes are communicated with reasonable notice.

!

No SLA Guarantees

API availability follows platform availability. Dedicated SLAs are negotiated separately for qualifying customers.

Important Notes for Procurement

  • • API access requires enterprise-tier contract
  • • Schemas and documentation are not publicly available
  • • No commitments on future API capabilities or timelines
  • • Integration support is provided as part of enterprise onboarding

Request API Access

If you have a qualifying use case and are on an enterprise plan (or evaluating one), contact our enterprise team to discuss API access.

Contact Enterprise Team

Related Pages