Is my data secure?

Yes. Here is what that means in practice.

• Encryption. Your data is encrypted in transit over HTTPS and encrypted at rest.
• EU hosting. Your data is hosted in the EU.
• Bank connections. We never store your bank login. Access is read only, encrypted, and runs through an EU regulated open banking provider.
• Mailbox and storage access. We ask for the minimum. We read mail to find invoices and file documents in the folder you chose. We cannot send mail from your account or touch unrelated files.
• Your own copy. Invoices are mirrored into cloud storage you own, so the files stay yours.
• Access control. Team members get only what their role allows, and accountants are read only.
• Your rights. You can export or delete your data at any time.

Independently checked

We are independently assessed for the mailbox and storage permissions we request, and we run regular independent security testing.