We built this for ourselves first. These are the standards we'd demand from any tool handling our own financial data.
AES-256 at rest on UK-based servers, TLS in transit. Backups encrypted on-server before leaving.
Every company has its own private, dedicated database. Nothing is ever stored alongside anyone else's.
DPAs with Anthropic and Google: used to generate a response, then gone. Never used for training.
Encrypted, automated backups stored separately from the main server.
Export every transaction as CSV and every receipt as a ZIP, any time, including after cancellation.
One button in Settings permanently wipes every transaction, receipt and chat message.