Your tax records stay in Canada.
Receipts say a lot about a person. We built Claimwise to collect as little as possible, keep it in Canada, and give you the keys.
Stored in Canada
Database, files, auth and backups run in AWS Canada (Central).
No SIN, ever
We never collect your Social Insurance Number.
Read-only bank access
Through Flinks or Plaid. We can’t move money.
Encrypted
TLS in transit, encryption at rest, tokens in a secrets vault.
Short-lived image links
Receipt images are served through links that expire in 5 minutes.
Card numbers masked
We keep only the last 4 digits and mask full numbers on images.
Passkeys and MFA
Authenticator-app MFA, required on Business and Accountant plans.
Your devices, your call
See every signed-in device and sign any of them out remotely.
Scoped accountant access
Share a tax year, revoke it in one tap.
Your receipts don’t train anyone’s model.
Some processing, like the AI that reads receipts, happens outside Canada. Every provider is named in our privacy policy and bound by contract not to train on your data and to limit how long they keep it.
Quebec: a privacy impact assessment is completed before any transfer outside Quebec, per Law 25.
Keep it, take it, or delete it.
Records kept after each tax year, CRA’s standard period, then deleted unless you extend.
Target time for a full export of everything, images included.
Deletion requests completed within 30 days, with any legal holds disclosed.
Compliance, without the fine print
| Standard | Status | What it means |
|---|---|---|
| PIPEDA | In place at launch | federal privacy law, including breach reporting |
| Quebec Law 25 | PIA before transfer | privacy impact assessment before data leaves Quebec |
| Penetration test | Planned, annual | independent third-party testing every year |
| SOC 2 Type II | Planned, year 2 | audit starts in our second year to support firms and businesses |
Found a security issue? Email [email protected]. We reply within one business day.
Privacy questions? Ask a human.
Write to [email protected], or read the full privacy policy.
