How Reconza protects your files
Business reports can contain names, rates, payments and margins. Here is what happens from upload to automatic deletion.
Stored files use a key specific to your organisation.
Every database operation is restricted to your company.
Files are removed after your chosen retention period.
AI never decides settlement or payment amounts.
Upload, check, encrypt, delete
- 1. ValidateFile type, size and workbook contents are checked.
- 2. ProcessFixed rules compare the rows and calculate totals.
- 3. ProtectSource files and reports are encrypted before storage.
- 4. DeleteFiles are removed automatically or whenever you choose.
Company separation and file encryption
- Company isolation. Every record is tagged with your organisation, and every database query is filtered by it automatically. Writes that cross organisations are blocked.
- Encrypted at rest. Uploaded files and generated reports are encrypted with a key specific to your organisation before they're stored.
- Automatic deletion. Uploaded files and reports are permanently deleted after your retention period (30 days by default, configurable). You can also delete a run's files at any time. Summaries and the audit log are kept.
Unsafe uploads are rejected
- Only .xlsx, .xls and .csv files are accepted, and the file contents must match the extension.
- Workbooks containing macros, embedded objects, ActiveX controls or links to other workbooks are rejected.
- Oversized and "zip bomb" files are refused.
- Files are scanned with the ClamAV antivirus engine.
Downloaded Excel files are made safer
Text that a spreadsheet could interpret as a formula (for example a cell beginning with =, + or @) is neutralised in every export, and totals are written as values, so opening a report can't trigger formula injection.
Accounts, invitations and activity history
- Passwords are hashed; accounts lock after repeated failed sign-ins, and sign-in pages are rate-limited.
- Team members join by single-use email invitation. Password-reset links expire after 3 hours.
- An audit log records workflow changes, runs (with a SHA-256 fingerprint of every file), exception decisions, downloads and deletions.
AI may suggest columns; it never calculates payments
Reconza never uses AI to calculate settlements. When AI column-mapping is enabled, only the column headers and a few sample rows of a file you're setting up are sent — to an open-source model running on our own servers, not to a third-party AI provider.
Payments
Payments are handled by Razorpay (India) and Stripe (international). Reconza never receives or stores card details.
Questions about security? Email contact@bytehills.com and we'll answer in detail.
Check your files without giving up control
Set up a recurring check once. Next time, upload your files, review possible problems and download the result.