Security and privacy
This is the place where we explain how we handle security and data. What is not stated here is in the privacy statement.
As little as possible recorded
The questions you paste in the capcheck are not stored if you are not logged in: they are assessed and then deleted. Nothing is stored of what you paste in.
The documents you upload for your dossier — invoices, receipts, reports — are yours. We use them to build your dossier and for nothing else: not for research, not for benchmarks, and we do not sell or share them with anyone.
Technical
Everything goes over https with HSTS. Passwords are stored hashed, sessions are in the database, and two-step verification is available via email or sms — available to everyone, and never mandatory.
An encrypted back-up is made daily, and that back-up is automatically restored in a test — a back-up you have never restored is not a back-up.
Download everything, always
Via your settings you export all your data as a ZIP file with one click. You can cancel at any time; your invoices remain available for as long as the law requires.