How we handle your documents
You're trusting us with your bills and statements. Here is exactly what happens to them.
Send us as little as possible
The safest sensitive data is data we never receive. Before you upload, please redact anything the analysis doesn't need: passwords, full bank account or card numbers, Social Security numbers, tax IDs, customer information and employee personal information.
We will never ask for your bank login or any other password.
Where files are stored
- Uploads go straight into private storage. No document ever has a public web address.
- Files are encrypted in transit and at rest, and are stored under random names rather than your filename.
- We check that every file really is the type it claims to be. We never run or execute uploaded files.
Who can see them
Only authorized Business Expense Detective reviewers can open your documents. Each time a reviewer opens a file, a link valid for 60 seconds is created and the access is recorded in an audit log.
Your private scan link lets you add files to your scan. Anyone with that link can do the same, so keep it to yourself.
Human reviewed
During the founding pilot, a person reviews every Expense Scan before it is delivered.
You stay in control
We don't cancel services, switch vendors, negotiate contracts or make purchases without your explicit permission.
How long we keep files
Original documents are scheduled for deletion 30 days after we deliver your final Expense Scan. To have them deleted sooner, email hello@businessexpensedetective.com.