Security Overview

Data regions

Customer workspace data is stored in Google Cloud regions in the EU. AI extraction uses Vertex AI in europe-west4.

Firebase Authentication is a global service; account identifiers may be processed outside the EU under Google's infrastructure.

Access control

Workspace access is scoped by company membership. Platform administrators are limited to an explicit allowlist and custom claim.

Firestore and Storage security rules deny client-side creation of sensitive records; mutations run through authenticated server paths.

Encryption

Data is encrypted in transit with TLS. Cloud provider encryption protects data at rest in Firebase and Cloud Storage.

Logging and telemetry

Operational logs exclude document bodies and attachment content. AI telemetry records usage metrics, not extracted receipt text.

Incident response

Suspected security incidents should be reported with Contact us in the footer. We investigate, contain and notify customers when required by law.