Security & data
CAVOA reads the invoice file you choose. It does not connect to your bank or change your billing system.
You control the workspace
A random private access key opens your workspace. Only a hash of that key is stored. Browser sessions expire after 24 hours and use secure, HTTP-only cookies. Save your key: email login and key recovery are not available.
Evidence you can check
Each finding includes its invoice ID, source row, dates, balance, and versioned rule. Calculations use whole cents. Different currencies stay separate.
Permission before action
Approval saves a manual review decision only. This release cannot send a message, create a charge, or verify recovered revenue. Stripe and email integrations are disabled.
Limits and data
Files are limited to 256 KB and 500 rows. Workspaces have 20 scans. Requests and signup are limited to reduce abuse. We do not claim SOC 2 compliance or a security certification.