Security

1. Your data is never shared or sold

We do not sell, rent or share your data with advertisers or data brokers — ever. The only third parties who touch your data are the sub-processors needed to run the service: Stripe (payments) and OpenAI (reading your documents to extract bookkeeping entries — your documents are never used to train AI models). The full list and terms are in our Privacy Policy and Data Processing Agreement.

2. AI privacy shield

Before any document text is sent to the AI for categorisation, our privacy shield automatically removes bank account numbers, IBANs, card numbers, PPS numbers, phone numbers, Eircodes, email addresses and address lines. The AI only ever sees what it needs to book the entry — supplier or customer names, dates and amounts — and your stored documents always remain complete. Documents are never used to train AI models.

3. Encryption everywhere

All traffic between your browser and MY AI Accountant is encrypted with HTTPS/TLS, and documents you upload are stored in encrypted cloud storage. Security headers on every response protect against clickjacking and content-sniffing attacks.

4. Account protection

• Passwords are stored only as secure one-way bcrypt hashes — nobody, including us, can read them, and they are never kept in cookies.
• Sessions use short-lived, httpOnly, Secure cookies that JavaScript cannot steal, with strict same-site rules.
• Sign-in, registration and password reset are rate-limited to stop brute-force and abuse.
• Password reset links expire after 1 hour and work once only.

5. Strict data isolation

Every account's data is kept in a strictly separated workspace, enforced at the database level on every request. For accounting firms, each client's workspace is isolated too — one client can never see another's records.

6. Payments handled by Stripe

Card payments are processed entirely by Stripe. Your card number never touches our servers — we only ever see that a payment succeeded.

7. You stay in control

Export all of your data, or permanently delete your account and everything in it, at any time from Settings — no phone call or email needed. See our Privacy Policy for your full GDPR rights.

8. Report a security issue

Found something that concerns you? Email info@myaiaccountant.ie and we will investigate promptly. Please give us the chance to fix an issue before sharing it publicly.