Security & Privacy
Enterprise-grade protection for your financial data.
Processing statements contain revenue figures, banking relationships, and chargeback history — data your competitors would pay for. We treat it with the same care you would.
Infrastructure
How we protect your documents
From the moment you upload to the moment we deliver your review, your data travels and rests inside a hardened security perimeter.
AES-256 encryption at rest
All uploaded documents and extracted data are stored encrypted with AES-256. Encryption keys are rotated on a scheduled cadence and stored separately from the data they protect.
TLS 1.3 in transit
Every byte traveling between your browser and our infrastructure is protected by TLS 1.3. Older protocol versions are disabled; HSTS is enforced on all endpoints.
Private vault storage
Uploaded statements live in isolated, access-controlled storage — not a shared bucket. Documents are scoped to your session and never co-mingled with other merchant files.
Strict access controls
Access to document data is limited to the review team on a need-to-know basis. Roles are enforced at the infrastructure layer, not just at the application layer.
Audit logging
Every access event — read, write, export — is logged with a timestamp and actor identity. Logs are immutable and retained to support compliance inquiries.
Data minimization
We collect only what is necessary to complete the statement review. Retention is limited to the active review window; you can request deletion at any point by email.
Data Handling
What we do — and don't do — with your data
A clear statement of our data-handling commitments. No legalese, no carve-outs.
- Your statement is used solely to prepare your review — nothing else
- We do not sell, license, or share your data with any third party
- We do not use your data to train machine-learning models
- You may request deletion of your submission at any time
- No account is created and no data is retained beyond the review window without your consent
- Our team accesses your documents on a need-to-know basis only
- All personnel with data access are bound by confidentiality obligations
- Security practices are reviewed and updated on a regular cadence
Ready to see where you stand?
Submit your most recent statement. We'll review it within 24 hours — confidentially, at no cost.