Built for sensitive billing and CRM data.

All uploads and API traffic use HTTPS/TLS. Data in transit is encrypted end to end between your browser and our infrastructure.

Raw CSV files exist only during active processing. They are automatically deleted after ingestion completes or when the audit session expires.

Free audit sessions do not retain raw uploads beyond what is required to produce your summary. You retain full ownership of your data at all times.

Your billing and CRM data belongs to you. We process it solely to deliver audit results. Purchased reports store normalized findings, never original CSV filenames as business logic inputs.

We are building toward SOC 2 Type II certification. A security questionnaire is available upon request for procurement and vendor review.

Canonical normalized records and audit metadata are retained only to support purchased reports and your workspace history. Raw CSV uploads are never kept longer than required for processing.

Anonymizing is optional. It is not required for a valid audit. If blanking names and emails helps your team feel more comfortable, that is enough for most exports.

1. Remove or blank customer and account names, and any email columns.
2. Keep IDs consistent across files (customer_id, subscription_id, invoice_id, product_id). If you hash IDs, use the same mapping in every export.
3. Leave amounts, quantities, currencies, dates, statuses, and billing intervals unchanged. Those fields power the audit.

Prefer a local tool? Microsoft Presidio is a solid open-source option for redacting names and emails. Only redact identity fields. Leave money, dates, and join keys untouched so the audit still works.

Need documentation for vendor review? Email aaryan@paevo.co or contact us.