Your data. You see everything, you stay in control.
Two options depending on your constraints. In both: a log of every action, a kill switch, and the possibility to show everything.
Your data
Two options, one principle: you see everything, you stay in control.
AI via API
The AI runs at a provider: Claude by Anthropic or OpenAI. Faster setup, no hardware to buy.
Sent to the provider: the text of the e-mails and documents to understand, never your credentials or passwords. Stored in the United States, deleted within 30 days (Anthropic, policy of 1 July 2026). Transfer covered by Anthropic's DPA and its standard contractual clauses, which apply to all its commercial customers (Anthropic's written reply of 22/10/2026).
Local AI
The AI runs on a machine on your premises. For sensitive data or compliance constraints. Hardware bought separately, outside the offer.
No content from your e-mails or documents is sent to an AI provider. Software updates go through the publisher, with your agreement, traced.
What the assistant reads
The mailboxes you entrust to it, attachments (invoices, receipts, scanned mail), your bank exports. Nothing else. The exact list is set with you at setup and can be reduced at any time.
Where it runs
API option: the software runs on a machine of yours (your computer, or a small dedicated machine in your name, priced in the quote), and the texts to analyse are sent to the AI provider (Claude by Anthropic or OpenAI) to be understood. What is sent: the text of the e-mails and documents to understand, never your credentials or passwords. This data is stored in the United States and deleted by the provider within 30 days (Anthropic, policy of 1 July 2026); a no-retention option exists by agreement with Anthropic. The transfer outside the EU is covered by Anthropic's data processing addendum (DPA) and its standard contractual clauses, which apply to all its commercial customers (Anthropic's written reply of 22/10/2026); copy on request. As of today, the API offers no storage in Europe: if that is a requirement for you, choose the local option. Local option: the AI runs on a machine on your premises. No content from your e-mails or documents is sent to an AI provider; software updates go through the publisher, with your agreement, traced. Hardware is bought separately.
What is kept, and where
Cases, the transaction register and the action log are kept on your premises, on the assistant's machine. Kept as long as the service is active. Backups: yours, those of your machine. The publisher keeps no copy.
Who can access it
You. Your accountant if you give them access. The publisher, only for setup and support, only at your request, through a session you open or on site, each intervention dated in the log with its reason.
Audit
Everything can be shown, tested and audited. External audit possible, under NDA if needed.
Stop
One gesture stops all sending. One request ends the service: your data is handed back (cases, register as CSV, log) within 10 working days, then erased from the assistant's machine, with written confirmation.
Your bank
A precise specification. You set what it sees.
Today the assistant reads a CSV export from your bank. Reading through an API is only offered if your bank meets our specification, and sme luxembourg decides, bank by bank.
What a bank must allow
- Read-only access through its official interface: no payment, transfer or modification capability.
- A scope chosen by you: which accounts, which period, which transaction categories. The rest is not read.
- Access you can revoke at any time, on your side, without going through us.
- An access log you can consult.
What you decide
- What the assistant sees, and what it doesn't.
- What it may do with it: match, file, request a document. Never pay.
- When it stops.
Revolut Business: CSV export verified, read-only API demonstration in progress. BGL BNP Paribas, BIL, Banque Raiffeisen: PSD2 API published, review in progress. The full specification and status per bank are on this page. If your bank doesn't meet these conditions, we stay with the CSV export, which works.
What it never does without you
It doesn't pay. It doesn't send. It doesn't sign. It doesn't commit your company.
Draft mode
Every e-mail, every request waits for your approval.
Log
Every action is traced, dated, readable.
Kill switch
One gesture, and all sending stops.
Sending cap
A maximum number of sends per day, and a copy to you every time.
We don't plug an AI into a company and hope for the best. Every step is written, demonstrated, measured. You approve each one.
A strict setup. Nothing left to chance. →