Security & trust at SnapSpend

1. How our trust posture is built

Our database, file storage and hosting partners are SOC 2 Type 2 audited. Your data sits on SOC 2-audited infrastructure from the moment you sign up. SnapSpend layers its own application and database-level controls (Row-Level Security, role-based access, time-limited file links, admin audit logs) on top, designed so we never weaken what we inherit.

2. Where your data lives

SnapSpend uses managed Postgres and object storage in an Asia-Pacific region (specific region details available on request). Your receipts, parsed data, and exports are stored in that region. During AI parsing, documents are processed by established AI providers under API terms that prohibit using your data to train their models. We never train models on your documents and never sell them, and we share them only with the service providers that process them for us, as listed in our Privacy Policy.

3. Encryption

All documents are encrypted at rest using AES-256, and in transit over TLS 1.2 or higher. Documents are opened through time-limited links generated per request, which expire after one hour. Your password is hashed with bcrypt; no one at SnapSpend can read it.

4. Tenant isolation & access control

SnapSpend is multi-tenant, and isolation is enforced in the database itself — not just in application code. Even if an application bug slipped through, the database independently blocks cross-organization access.

• Row-Level Security on every business table — every query is scoped to your organization at the database layer
• Role-based access control — owners choose each invited person’s role (Admin, Member, or Viewer, which is read-only), and every role gets only the permissions it allows
• No self-escalation — roles, plan tiers, credit balances, and account limits are protected at the database level and can only be changed through authorized platform channels
• Locked-down internals — background processing and privileged database functions are sealed off from direct user access and reachable only by platform services
• Audit logs of administrative actions, such as credit changes, organization changes and staff role changes
• Staff access — SnapSpend staff do not access your documents in normal operation. Production access is limited to a small number of engineers, read-only by default, and used only for support or incident response

5. Ongoing security practice

Security is not a one-time project at SnapSpend. In 2026 we completed a comprehensive internal security audit covering account permissions, data access paths, sign-in flows, background processing, and file exports — and shipped fixes for every finding. Every release now passes a security-focused review gate before it ships.

One example: exported CSV and Excel files neutralize embedded spreadsheet formulas, so a maliciously crafted receipt can’t execute code when you open your export — while your amounts stay fully usable for calculations.

6. Controls built into the product

• Confidence scores — every document shows how sure the AI is about what it read. Documents below the threshold (85% by default, adjustable per organization) are flagged for review, and an organization can require review for every document
• Approve or decline — documents can be approved or declined after checking, one at a time or in bulk
• Edit history — every document shows what changed, when, and by whom, including line items, which can be restored to what the AI originally read
• Submission History — lists every upload, including deleted ones. It is append-only: no user can edit or erase it
• Duplicate protection — an identical file is refused on upload, and likely duplicates are flagged for review
• Export safeguards — you are warned when a receipt was already exported, and declined documents never contribute amounts to an export
• BIR reporting you can stand behind — SLSP never files a row with missing details. Documents without a TIN, name or address, or still in review, are skipped and listed with the reason
• Processing you can trace — every failed processing attempt gets a reference code and alerts our team, and its credit is refunded automatically

7. Compliance posture

Inherited from infrastructure (database, file storage and hosting partners): SOC 2 Type 2 · GDPR-aligned data handling.

SnapSpend itself is not yet SOC 2 certified — formal certification is on our roadmap, and we implement SOC 2-aligned controls (RBAC, encryption, tenant isolation, audit logging, release security reviews) today.

Philippine-specific: DPA 2012 alignment (NPC registration in progress) · BIR-compliant output formats (SLSP, 2550M).

BIR / BSP: SnapSpend produces SLSP and 2550M outputs that match BIR’s published file specifications for eFPS submission. We are BIR-compliant by output, not BIR-accredited — no such accreditation exists for receipt-parsing software in Philippine law.

Want documentation? Email security@snapspend.ai and we’ll help you request our infrastructure partners’ SOC 2 Type 2 reports through their trust portals.

8. Reliability

• Uptime target: 99.5% on Pro and Unlimited plans (formal SLA on roadmap).
• Backups: Your documents’ data is backed up daily, and backups are kept for 7 days. Original files are kept on redundant, highly durable storage, and you can download them at any time through exports that include originals.
• File integrity: A nightly check confirms every document still has its file. If one is ever missing, the owner can restore it with Upload again without losing the document’s data or history.
• Incident response: Customers are notified within 24 hours of any confirmed incident affecting their data.
• Status page: In development.

9. Your data, your rights

You can export everything at any time, in machine-readable format (CSV and Excel), with your original files included if you choose. Your original files are kept for as long as your account is active, with no time limit, until you delete them.

Deleting a document is permanent: its file is removed immediately, and its records drop out of our backups within 7 days. You can also request deletion of your account and all associated data: every row and every file is removed within 30 days of your request, and nothing remains in our backups 7 days after that. No “we keep a backup forever.”