Stored in Canada, encrypted
Your statements, receipts and books are stored in Canada, in Montréal, and the app's servers run there too.
Everything is encrypted on its way to us and while it's stored. Each business's files sit in their own private folder, and a link to open a file stops working after 10 minutes.
Only the people you choose
Nobody sees your books unless you invite them. Your accountant can look, or look and fix things, and you can remove them any time.
Someone at your business can help as staff without seeing your taxes or payroll, and you can limit them to certain jobs.
These rules are enforced by the database itself, not just by what the screens show. A person without access gets nothing back, even if they try to go around the app.
Every change is on the record: who changed what, and when. Nobody can edit that history, including us.
A stolen password isn't enough
Passwords are at least 10 characters. Turn on two-step sign-in and every sign-in also needs a code from an authenticator app on your phone, like your bank. The database checks for that code too, so a password alone can't read anything.
Accounting firms can require two-step sign-in for everyone on their team.
What we never keep
- Your bank password. You upload statements yourself, so we never need it.
- Social insurance numbers. When you file T4 or T4A slips, you type them in and the file is built on your own computer. They're never saved.
- Card numbers. Payments go through Stripe, and we never see your full card number.
SumSwift also never holds or moves your money, and it won't pay a bill on its own.
How the AI reads your statements
SumSwift uses Claude, made by Anthropic, to read statements and receipts and sort transactions. To do that, the statement is sent encrypted to Anthropic in the United States, used for that task, and not used to train their AI.
A few other trusted services handle one job each: email (Resend), payments (Stripe) and hosting (Vercel). The full list, and where each one is, is in our privacy policy.
Backed up every night
Your books are backed up every night, encrypted, and kept for 30 days, so a problem on our side doesn't lose your work.
Take it with you, or delete it
Download everything any time: a spreadsheet, your year-end package with every receipt, a QuickBooks export, or one file with all your records.
Delete your account and your files and books are removed, and we check they're gone. CRA asks businesses to keep records for six years, so download them first.
Found a problem?
If you think you've found a security problem, tell us right away through Help & feedback in the app or the contact form in our help center. A real person reads every message.