Files first
No system connection is required. After booking, we arrange a secure file handoff. Keep documents out of calendar notes and general contact emails.
Security
Security for your records.
Start with one invoice. Access, processing and retention are agreed before you share it.
What you send
An initial assessment starts with the invoice. We then request the agreements and usage records needed to check a charge.
Limited connections
Any later connection needs approved read permissions. Connection credentials are encrypted.
Who can see it
Access requires an account, organization membership and the right permissions.
Separate permissions
Viewers read records. Reviewers prepare findings. Administrators manage access. Database rules keep each organization’s records separate.
Your approval
A named finance approver reviews each claim against its evidence. Your policy can require a second reviewer.
What happens to it
The source files and review history stay with each finding.
Protected files
Hosted source files, session data and background-job data use AES-GCM encryption. Evidence history cannot be edited during ordinary use. File checks detect changes.
Retention and deletion
Administrators can record retention rules and legal holds. Deletion requires privileged access and checks for those holds.
Data location, staff access, model use and deletion terms are agreed before files are shared. Removal from backups, exports and service providers is covered separately.
Ask a security question