Security and privacy

#The promises

• Read-only, always. Cass never writes to your books, never moves money and never edits an entry.
• Your own key. Each company's secrets are encrypted with a key of its own (AES-256-GCM).
• Stored in India. Your books sit in a database in Mumbai.
• Files deleted once read. An uploaded file sits in a temporary folder only while it is read, usually minutes.
• Calculated, never guessed. No AI model reads your books; every figure is added up from your entries.
• Gone in one step. The owner can delete the company in Settings, Security. That destroys its key and deletes every entry, statement, report and file.

#Who can see your data

Only the people you add, with the role you choose. We run the service and can reach the database to keep it working, but we don't look at a company's data unless you ask us to help.

The full detail, including what the monthly email carries, is on the Privacy page.