We believe trust is earned with honesty, so we describe our security model plainly. We do not claim “bank-level”, “military-grade” or “unhackable” security, and we hold no SOC 2 or ISO certifications today. Here's what is actually true.
How it works
The workspace boundary
Every piece of data carries a workspace identifier, and every request is filtered to the workspaces you belong to — so you only ever see your own data. Access within a workspace is governed by roles (owner, admin, member, viewer).
Signing in
- Passwords are hashed with bcrypt (never stored in plain text) and sessions use signed tokens.
- You can continue with Google, verify your email, and reset or change your password securely.
- You can enable two-factor authentication (2FA) with any authenticator app for an extra layer.
Protecting your data
- All traffic uses TLS/HTTPS in transit, and data is stored with a managed provider that encrypts at rest.
- Receipt attachments live in a private store and are only ever served through short-lived signed links — never public URLs.
- The provider performs regular automated backups.
Limitations
- Available now: app-based 2FA (TOTP).
- Still on the roadmap (we never imply they exist today): passkeys, device management, and login history.
- We don't offer SMS/email one-time codes.
Common Questions
Is my data encrypted?
Yes — encrypted in transit (TLS/HTTPS) and at rest by our managed database provider. We don't claim any specific certification.
Do you offer two-factor authentication?
Yes. You can enable app-based 2FA (TOTP) in Settings → Security, with one-time recovery codes. Passkeys, device management and login history are still on the roadmap.
Can other people in my workspace see everything?
What they see depends on their role. Viewers are read-only; members contribute; admins and owners manage the workspace.
Are my uploaded receipts public?
No. Attachments are stored privately and only accessed through short-lived signed links.