Security at BinaDesk
Last updated 28 October 2026
You're trusting us with your bank statements. This page says, in plain words, where they go, who sees them and how long we keep them. If anything here changes, we'll update this page.
Where your files are kept
Your files are stored on our server in the United States (Ohio), on disks our host encrypts, together with their daily backups. Everything between you and us travels over an encrypted connection.
Who can see them
- Our software and AI models read your files, identify the businesses on your statements and build your workbook. Every workbook is checked against your statements before it reaches you, and anything your statements can't settle is asked of you rather than guessed. The AI models come from Anthropic, Google and OpenAI through their business services, never consumer chat apps, and their terms say they do not train on your data. Your own name is never part of a search, and a charge that names a private person is never looked up.
- A person on our team looks at your order only when something needs a person, and we record every time they do.
- We never sell your data or share it with anyone not listed on this page.
How long we keep them
We delete the statements and other files you send us 30 days after we deliver your workbook. If an order is cancelled or never finished, we delete its files 30 days after the last activity on it. Your workbook stays in your portal so you can download it again whenever you need it, until you delete it. You can delete your files and your workbook sooner with one button in your portal, and closing your account deletes everything at once.
Your account
- The first time you sign in on a new browser, we email you a code. That browser is then remembered for 30 days.
- You're signed out after 15 minutes without activity, and changing your password signs you out everywhere.
- Links to your files stop working after 7 days.
If something goes wrong
If we learn that your data has been exposed, we'll tell you within 72 hours, with what happened and what we're doing about it.
Companies that handle your data
| Company | Security certification |
|---|---|
| Anthropic | SOC 2 Type II, ISO 27001 |
| Cloudflare | SOC 2 Type II, ISO 27001 |
| Google Cloud | SOC 2 Type II, ISO 27001 |
| Microsoft | SOC 2 Type II, ISO 27001 |
| n8n | SOC 2, audited every year |
| OpenAI | SOC 2 Type II, ISO 27001 |
| Render | SOC 2 Type II, ISO 27001 |
| Resend | SOC 2 Type II |
| Slack | SOC 2 Type II, ISO 27001 |
Audits
BinaDesk itself has not yet been audited for SOC 2, and we'll say so here when that changes.
How to know it's really us
- BinaDesk has no desktop or phone app to download. You use BinaDesk only at binadesk.com and portal.binadesk.com.
- Our emails come from addresses ending in @binadesk.com. We never ask you to install anything or to send us your password.
- If something says it's from BinaDesk and you're not sure, email security@binadesk.com before you open it.
Report a security problem
Email security@binadesk.com. We reply within one business day.