Security without vague badges.

The current product analyzes copies of contracts and invoices that a user deliberately uploads. Connected accounting providers use read-only accounting or file scopes: QuickBooks and Xero can supply billing evidence, while Microsoft Excel/OneDrive lets the user choose the specific workbooks to analyze. The product exposes no controls for writing to accounting records or cloud files. SABIO does not connect to a bank account, move funds, edit invoices, or contact customers.

QuickBooks, Xero, and Microsoft access and refresh tokens are encrypted before storage with authenticated AES-256-GCM encryption. Connections can be removed from the dashboard. Original uploaded or connected documents are discarded after processing.

Uploaded files are processed to create an evidence-linked scan result. SABIO stores filenames, structured findings, values, review outcomes, and only the extracted clause or invoice excerpts needed to support each finding—not the original uploaded document.

Authentication is provided through Supabase Auth. Database row-level security restricts records to members of the correct company workspace, with Admin, Manager, Editor, and Viewer permissions. Privileged server credentials are never sent to the browser, and workspace activity is recorded in an immutable audit log.

Checkout and subscription management are hosted by Stripe. SABIO does not collect or store complete card details.

Automated findings are decision support. Verify the underlying clause, invoice, and calculation before changing billing or sending a notice.