Security & data

Client statements are sensitive. This page says exactly what happens to them, in plain words.

Where your files go

• PDFs upload directly from your browser to a private storage bucket (Supabase, US East). Only your signed-in account can read your files; database access rules enforce this for every row.
• The statements are read by our own software on our servers (Vercel, US). That is the normal path for digital PDFs.
• If a statement cannot be read and verified that way, or it is a scan with no text, the PDF may be sent to Anthropic’s commercial Claude API to transcribe it. Under Anthropic’s API terms your data is not used to train models, and the model we use does not retain prompts or outputs by default (flagged-for-safety content can be kept longer under Anthropic’s policy). Whatever the AI reads is re-checked by the same math as everything else and is never marked Verified on its own say-so. Statements read this way are labelled.
• Nobody at AccessDossier looks at your files. If you tick “Allow AccessDossier to audit this set”, each verified statement also gets an independent second read through the same Anthropic API, compared with the results to measure accuracy. Only match counts are kept.

How long we keep things

• Source PDFs: deleted automatically within 7 days of upload.
• Extracted transactions, results and reports: deleted automatically 30 days after upload.
• “Remember closing balances” (optional): the last 4 digits of the account, the period end date and the closing balance only, kept until you delete them.
• “Delete everything” on your Account page removes all of the above immediately.

What we never do

• We never sell or share statement data, and we never use it for advertising.
• Error monitoring (Sentry) and product analytics (PostHog) receive no statement content: no file names, amounts, descriptions or account numbers. Analytics records events like “a report was downloaded”, plus your anonymous user id.
• We do not ask for bank logins. You upload statements you already have.

What “Verified” means

Verified means the statement’s math ties out: opening balance plus every transaction equals the closing balance, every printed running balance matches, and no page is missing. It does not mean transactions are categorized correctly.

What we do not claim

AccessDossier is a young product. We do not hold SOC 2 or similar certifications, and we don’t claim any. We will publish measured accuracy figures, with the sample size and date, once they exist.

Contact

Security questions or a deletion request: hello@accessdossier.com.