Independent audit
SOC 2 Type II
Our security controls have been independently audited to assess how they operate over time.
Request the reportTrust & security
Bank-grade security.
Privacy by design.
Your receipts reveal a lot about your life and your business. We protect them with independently audited security, encrypted storage and privacy built into how discovery works.
Google security requirements
CASA Security audit
We have completed the Cloud Application Security Assessment required for our Google data connections.
Ask about the assessmentPrivate from the first step
Your photo library stays personal.
Photo discovery starts on your device. Only images identified as receipts leave your phone for processing.
- 01 · On your phone
Check images locally.
Terrapin looks for receipts in the photos you give it permission to access. That first check happens on your device.
- 02 · Only the matches
Upload receipt images.
Only images identified as receipts are sent to Terrapin for processing. We do not upload your whole photo library.
- 03 · In your workspace
Bring the details together.
Receipt images are processed securely to extract and organize the details you need for review.
This describes automatic discovery in your phone’s photo library. Documents you choose to upload, and email or cloud-file connections, use their own processing flows.
AI with a clear boundary
Your data is not training material.
We do not use your receipts, invoices or personal information to train AI models. AI helps read and organize the documents you bring to Terrapin. Your data is used to provide that service.
We do not sell your personal data. Your records remain yours.
Bank-grade protection
Protected in transit.
Protected in storage.
Your data is encrypted while it travels between your device and our services, and while it is stored. Access controls limit who can reach it.
Our SOC 2 Type II audit examines how security controls operate over time. Our Google CASA assessment covers the security requirements for our Google data connections.
The technical detail, if you need it
Encryption in transit: TLS 1.3. Encryption at rest: AES-256. Cloud infrastructure: Microsoft Azure, hosted in the United States.
SOC 2 Type II and CASA are separate assessments. Ask us for the reports and scope relevant to your review.
You stay in control.
Choose what connects
You authorize each source. Photo permissions, email connections and payment feeds are separate choices, so you can connect the sources you need.
Keep the source intact
Discovery reads from your sources. It does not send emails, delete source files or move money.
Set the right access
Individuals, teams and practices work within their assigned access. Practice access is limited to authorized client workspaces and business-classified records.
Decide what leaves your workspace
Review the records you share, export or send to QuickBooks Online or Xero. Accounting delivery uses the separate connection you authorize.
Straight answers.
Does Terrapin upload my entire camera roll?
No. Automatic photo discovery checks images on your device and uploads only images identified as receipts. Your photo library is not copied to our servers. You choose which photos the app can access through your phone’s permissions.
Does all processing happen on my phone?
No. The first check for receipt images happens on your phone. Identified receipt images are then processed in our secure cloud to extract and organize their details. Connected email and cloud files are handled through the connections you authorize.
Do you use my data to train AI models?
No. We do not use your receipts, invoices or personal information to train AI models. We use AI to read and organize your documents as part of the service you choose to use.
Can Terrapin change my inbox or move money?
Discovery reads from your connected sources. It does not send emails, delete source files or move money. Sending reviewed records to QuickBooks Online or Xero is a separate action through the accounting connection you authorize.
Can my accountant see my personal records?
Practice access is limited to the authorized client workspace and business-classified records. Review your classifications and the access you grant before sharing. Your personal photo library is not shared with your accountant.
Can I change my mind about access?
Yes. You can revoke a source connection or change photo permissions in your device settings. Disconnecting stops access to that source; it does not automatically delete records already collected. For deletion and retention details, see the privacy policy or contact us.
See the evidence.
Review our security materials in the Trust Center, or request our SOC 2 Type II report and CASA assessment documentation for your review.
Bringing a team or client book?
We can help you review access, sharing, retention and the controls your organization needs.
Talk to us about security