Security and privacy
Where your documents go, and who sees them.
Each line here is checked against the code, a live test or the provider's documents.
Who sees them
- Only your company and the people you invite. One company cannot read another's records.
- Links to an original last 1 to 2 minutes and work only for members of your company. There are no public links.
- A person you ask for a receipt sees one payment and your company's name, and can send one file.
How they get in
- Files are checked by their content, not by their name: up to 10 MB and 3 pages.
- Every PDF is opened by an isolated service in Northern Europe, with no network, which redraws it as images. Files with scripts, automatic actions or attachments are refused.
Who reads them
- Claude, by Anthropic, reads photos and PDFs. Anthropic does not train its models on API data by default.
- Anthropic deletes inputs and results within 30 days; requests flagged for safety can be kept up to 2 years.
- Anthropic keeps data in the United States; the transfer is covered by the EU standard contractual clauses.
- E-invoices are read from their XML file, without AI.
Where they are kept
- The database is in Ireland, with daily backups kept for about 14 days; a full restore was tested on 31 October 2026.
- Backup copies of the originals are kept in Northern Europe.
What we don't do
- No advertising and no trackers in the application.
- We don't train models on your documents.
- Visits are counted in aggregate, without cookies.
- Fonts are served by this site: your address does not reach other services when a page opens.
When you leave
- You export everything: records and originals.
- Close your account and we delete the originals first, then the records, then the sign-in.