Invoices are sensitive, so we built InvoiceInspect to hold as little as possible. This page describes what we actually do, and the limits you should know about. For how we handle personal data, see the Privacy Policy.

Hold less, risk less

  • Guest uploads are not saved. The PDF is processed in memory for your request and then discarded. There is no stored copy to leak.
  • No stored results for guests. The results page and the PDF report are built from data carried inside the page itself, in encrypted form. Closing the page ends it.
  • Logs contain no document content. Our AI-call log records only metadata (provider, model, status, timing, tokens, cost). Our email log, when switched on, records only recipient, subject and outcome.
  • Short retention. Those logs are deleted after 90 days.

Protecting data in transit and at rest

  • HTTPS. The site is served over an encrypted connection, so uploads and logins are encrypted between your browser and our server.
  • Encrypted results data. The data that lets you download a report or confirm a value is encrypted and tamper-checked. A modified or foreign token is rejected.
  • Hashed passwords. Passwords are stored as one-way hashes, never in plain text.
  • Secrets in configuration. API keys and credentials live in server configuration, not in the code. The outgoing mail password, if set in the admin panel, is stored encrypted.

Protecting accounts and the service

  • Email verification. New accounts get the limits of a guest until the email address is verified, so made-up addresses gain nothing.
  • Rate limiting. Invoice checks, logins, password resets, contact messages and reports are rate limited to slow down abuse and guessing.
  • Safe sessions. Sessions are renewed when you sign in, and every form is protected against cross-site request forgery.
  • Uploads are validated. Files are checked for type and size against your plan's limits, and the PDF reader caps how much data it will decode so a hostile file cannot exhaust the server.
  • Safe content. Blog and page content is Markdown with raw HTML and unsafe links removed.
  • Restricted admin. The admin area is open only to accounts marked as administrators, and signed-in regular users are refused.

About AI processing

AI is part of the check, and we control whether it is on. When it is on, the page images of an invoice are sent to a third-party AI provider, which handles them under its own terms, and the upload box says so. The math that decides whether an invoice contains an error is done by our own deterministic code, never by AI. Details are in the Privacy Policy.

Current limitations

We would rather be clear than impressive:

  • We have not completed a formal security certification such as SOC 2 or ISO 27001.
  • Two-factor authentication is not available for accounts.
  • Account deletion is by request through the contact page, not a self-service button.
  • Optional document storage for paid plans is opt-in. This page will describe how it is protected before it is switched on for you.

Staying safe on your side

  • Use a long, unique password for your account.
  • Do not upload documents you are not allowed to share.
  • Do not upload documents that must not leave our servers while the upload box says AI is on.
  • Remember that an invoice checker verifies arithmetic, not authenticity. Confirm changes to bank details by phone, using a number you already trust. See how to spot a fake invoice.

Reporting a vulnerability

If you believe you have found a security problem, please tell us through the contact page with the word "Security" in the subject. Give enough detail for us to reproduce it, and please give us reasonable time to fix it before sharing it publicly. Please do not access data that is not yours, disrupt the service or run automated attacks. We do not run a paid bounty programme, but we do appreciate responsible reports and will reply to them.