Your invoices deserve careful handling.

Clerk handles sign-in. Costlr resolves workspace membership on the server before protected reads or changes. Hiding a button is never the authorization check.

Invoices and uploaded product images are stored in private Cloudflare R2 buckets. Invoice access requires an authenticated ownership check before short-lived delivery. Database records store file references rather than permanent public invoice URLs.

Optional digest thumbnails use temporary, token-protected links for included product images. These links do not make invoice originals or storage buckets public.

OCR and AI help interpret invoice text. Costlr checks structured results, arithmetic and product units with deterministic rules. Uncertain amounts, totals or matches go to Review instead of silently becoming trusted history.

The original remains the evidence. Confirmed corrections and mappings provide context for later purchases.

When receiving is enabled, inbox ingestion checks types, sizes and duplicate deliveries before background processing. It does not read your personal mailbox. Unsupported files and duplicates do not create an extra successful-invoice charge.

This page describes product controls, not an independent certification. No SOC 2 certification, guaranteed storage region or completed security audit is claimed here. Self-service workspace deletion is not currently available; contact us for the status of a data request.

Use the contact page with “Security concern” in the subject. Start with the affected page and a description; do not include customer data, credentials or full invoices.