# Security — Sumloop

Sumloop reads billing data. It cannot change a resource, resize anything,
alter a plan, or spend money.

## You can use it without connecting anything

Three of the four ways a cost gets in touch no vendor account: an uploaded
invoice PDF, a bill forwarded to the workspace address, or a typed entry. A
workspace can run entirely on those. The demo at https://sumloop.app/demo needs no
account at all.

## Credentials

- Every integration guide asks for the narrowest scope the vendor sells
  (`billing:read`, `read_api`, Billing → Read), and each guide is readable
  without an account: https://sumloop.app/integrations.md
- Encrypted with Cloak before they reach the database, so they are ciphertext at rest
- Row-level security on every table; every request is authorised against the
  workspace in the URL, including any second identifier in it
- Each connection is separate, named, and revocable on its own

## Where data lives

- Application: London
- Database and uploaded files: Supabase, in the EU
- Invoice extraction: Anthropic's API, which does not train on it
- Payments: Stripe, which is the merchant of record; no card number reaches Sumloop
- Full processor list and legal basis: https://sumloop.app/privacy

## Email

Sumloop runs its own mail server, so a forwarded invoice passes through no
third party. Senders are allow-listed and an unrecognised one is quarantined
before a model reads it. **Sumloop sends no mail at all** — enforced by a test
that fails the build if a send path is added.

## Review

A model reading an invoice produces a draft in a review queue, not a number in
the ledger. A person approves it.

## Getting data out and deleting it

Every dataset exports as CSV or JSON, built server-side from the filters
rather than from what a screen was showing; try it at https://sumloop.app/demo/export.
API keys are scoped, workspace-bound, and can be issued read-only. Deletion
removes the workspace from the product at once and destroys it seven days
later, files included.

## What is not claimed

No SOC 2 report and no ISO certification.

Full page: https://sumloop.app/security