How does CostPocket keep your data secure?

CostPocket keeps customer data safe and confidential by following established data security practices:

1. Encryption. All data exchanges with the CostPocket app, cloud, and web services — including passwords — are encrypted over HTTPS.
2. EU data storage and GDPR. All servers are located in the European Union, and CostPocket strictly adheres to GDPR requirements.
3. Token-based authentication. Other applications access data only through token-based authentication.
4. Role-based access control. An Access Control List (ACL) ensures only company account administrators can see all submitted documents; regular users see only their own.

Frequently asked questions

Where is my data stored? On servers located in the European Union, in full compliance with GDPR.

Can my colleagues see my submitted receipts? No. Regular users see only their own documents. Only account administrators (typically the owner and accountant) can view all documents.