Your records stay yours.Handled like a bank would.
We work from exports you choose to share, never from logins to your store, billing, payment or carrier accounts. This page shows exactly what happens to them.
Last updated 9 November 2026
orders_aug.csv SL-DX-0142
- 09:14:02Received through your private linkOne company · expires 23 Nov · revocableLink
- 09:14:02Checked in your browserType, size, fingerprint · no personal dataPassed
- 09:14:03Checked again on our serverContent matches .csv · no personal dataPassed
- 09:14:03Sealed in the EUEncrypted · private store, IrelandSealed
- 21 Nov14:20Opened for your review60-second link · loggedLogged
- 2 DecDeleted30 days after the readout · receipt sentDeleted
Every entry is written by the system, not by hand, and kept after the file itself is gone.
01
Security controls in place
- 01No account accessWe never ask for passwords or logins. You send exports; we read them.
- 02One link per companyValid for 14 days and revocable at any time. Only a fingerprint of the link is stored.
- 03Personal data stopped at the doorColumn names checked in your browser before upload; every file, PDFs and archives included, checked again on our server. Files with personal data are deleted.
- 04Renamed files refusedA file must really be what it says. Password-protected or scripted PDFs are refused.
- 05Downloads that expireOur own downloads use links that work for 60 seconds, and every one is logged.
- 06Everything recordedEvery upload, download, approval and deletion: who, what and when.
02
How long we keep things
- Your uploaded files
- Deleted within 30 days of the readout, with a confirmation; without a readout, 90 days after upload
- Files with personal data
- Deleted on arrival, never read
- Requests without a review
- Deleted after 12 months
- Outreach without a reply
- Deleted after 6 months
- Opt-outs
- Kept only as a one-way fingerprint, so we never write again
- Invoices and contracts
- 7 years, as Dutch law requires
03
Who else touches data
Only the providers that run our systems, each under data processing terms. Your files are never sent to AI models, data brokers or anyone else.
- Supabase
- Database and private file storage · European Union (Ireland)
- Resend
- Email delivery · European Union (Ireland)
- Vercel
- Website hosting · global network, no file storage
- OpenRouter
- Drafts readouts and claim letters for our review · receives findings only (references, dates, amounts), never your files · providers that keep nothing (zero data retention) · United States
04
No money passes through us
Claims are filed in your company's name, from your own accounts, and only after you approve each one. Credits and refunds land with you. We invoice our fee separately, and only on money that has reached your account and matches your ledger.
05
Privacy
What we collect, why, on what basis and your rights, for clients, for people who request a review and for people we write to: read the privacy notice.
06
Report a security issue
Write to hello@silentleak.com with “Security” in the subject. A person replies within two business days. Please don't test against client data.