Security notes
How we handle client bank data.
Bank statements are personal and business financial information. This page says, in plain words, what happens to them from upload to deletion.
In transit
Everything between your browser and our server travels over TLS, with HSTS so a browser refuses to downgrade. The app sends strict security headers (content security policy, no framing, no referrer leakage).
The engine that reads the statements is not reachable from the internet at all. It listens only on the server's loopback interface; the web app is the only thing that can talk to it.
At rest
Your uploaded PDFs, the OCR text extracted from them, and both workbooks are encrypted on disk (AES-128-CBC with HMAC via Fernet) under a server key that never leaves the machine. Plaintext exists only in memory and on disk while the pack is being built, then it is overwritten and removed.
Downloads are decrypted in memory for the request and never written back in clear.
Sign-in and who can open a pack
There are no passwords to phish or reuse. You sign in with a one-time link emailed to you; the link works once, expires after 15 minutes, and only completes when you press the button on the page, so a mail scanner that pre-opens links cannot sign in as you. The session lives in an HttpOnly cookie for 30 days and only its hash is stored on the server.
A pack belongs to the email address that built it. Only that signed-in address can list it, watch it build, download it or delete it. Anyone else, signed in or not, gets the same answer as for a pack that does not exist.
Deletion and retention
Delete the pack and every uploaded file from the server yourself, on the job page, the moment you have downloaded what you need. Otherwise a sweep removes every job older than 30 days.
Deletion removes the uploads, the OCR text, the workbooks and the job record. Files are overwritten before removal.
Where it runs
Processing and storage happen on CustomBeast (Pty) Ltd's own server in Cape Town, South Africa. Nothing is sent to an external AI service, a cloud OCR service, or an analytics provider.
The site loads no third-party scripts and no third-party fonts at runtime; the typefaces are served from our own domain.
What we keep about you
During the pilot there are no accounts. If you give an email address we keep it with the job so we can tell you when the pack is ready, and it is deleted with the job.
Server logs record request paths and timings, never statement contents.
Reporting a concern
Email [email protected]. Security reports get a human reply the same working day.