FC
Sign In

Security & Privacy

How ForwardCents protects your financial data

End-to-End Encryption

All data encrypted in transit (TLS 1.3) and at rest (AES-256). Financial information is never stored in plain text.

PII Removal

Personal identifiers are stripped from emails before AI processing. Your name, address, and card numbers are removed.

Secure Infrastructure

Built on Cloudflare Workers with enterprise-grade security, DDoS protection, and global edge network.

Data Isolation

Your expense data is completely isolated. Strict user-based access controls enforce this at every level.

How Your Emails Are Handled

1
Email Received

You forward a receipt to your unique ForwardCents address

2
PII Removed

Personal information is automatically stripped before processing

3
Email Deleted

Original email is permanently deleted after data extraction

Security Measures

Authentication & Access
  • Google OAuth for secure sign-in
  • No passwords to manage or compromise
  • Session-based authentication with automatic expiry
  • Unique email addresses for each user
Data Protection
  • AES-256 encryption for stored data
  • TLS 1.3 for data in transit
  • Regular security audits and monitoring
  • Automated backup and disaster recovery

Privacy by Design

What we do
  • Extract only expense-related data
  • Encrypt all stored information
  • Allow you to edit or delete any data
  • Provide transparent data handling
  • Delete original emails after processing
What we don't do
  • Store original email content
  • Share or sell your data
  • Connect to your bank accounts
  • Scan your personal email inbox
  • Track browsing or personal activities

Compliance & Standards

Security

Industry Standards

Best practices for financial data handling and cloud security

Privacy

GDPR Ready

Right to deletion and data portability built in

Transparency

Open Communication

Clear documentation and responsive to inquiries

Report Security Issues

If you discover a vulnerability or have concerns, please contact us immediately.

Response: Within 24 hours for security issues
Disclosure: We appreciate responsible disclosure

For details on how we handle your data, see our Privacy Policy.