Access and account control
Security starts with the account structure.
- Single-user account structure keeps ownership and access boundaries clear.
- 2FA support helps strengthen sign-in beyond just a password.
- Password reset flows are part of the public trust story, not hidden infrastructure details.
- Controlled AI access means assistant usage is tied to the signed-in account and plan limits.
Statements
Statement passwords are not stored
If a statement PDF is password-protected, the password is used only to help process that document. It is not kept as a stored credential.
POPIA-minded
Data minimisation matters
The direction is to collect and retain only what is necessary to deliver the product, with care around purpose limitation, safeguards, and user control.