Security

Security & Data Handling

This page describes exactly how Leasella processes your documents. Where possible, the values below — like the retention mode — are read from our own live configuration (/api/v1/public/trust) rather than written as fixed marketing copy.

We couldn't load the live configuration just now — the values below reflect our documented policy.

1. What we send to our AI provider

Leasella uses a third-party AI provider (currently openai) to read your documents. Two kinds of content leave our infrastructure for processing:

  • Extracted text — the text layer of your document, used for classification, structured-field extraction, and question answering.
  • Page images — for scanned or low-text documents, page renders are sent to a vision-capable model as an OCR fallback.

2. Text masking and image masking are different

Text masking: before any extracted text is sent to the AI provider, we mask high-sensitivity patterns — card-like numbers, Social Security numbers, and bank routing numbers are replaced with masked placeholders (card numbers keep their last 4 digits for classification). This runs on every text-based request.

Image masking: Page images sent for OCR are not currently masked. If a scanned page shows a visible card, SSN, or account number, that number is visible to the AI provider — treat page-image OCR the same way you'd treat emailing a scan to a vendor: assume anything visible on the page is visible to the processor.

3. Data retention: Standard retention (up to 30 days)

Our AI provider's standard tier may retain request and response payloads for up to 30 days for abuse monitoring, then deletes them. This is the truthful default unless a Zero Data Retention agreement is confirmed below.

4. Uploaded content is not used for training

Your document content is never used to train the AI provider's models or ours. This is a product and contractual commitment, independent of the retention mode above.

5. Encryption & tenant isolation

  • All traffic is encrypted in transit with TLS 1.2 or newer — connections offering older protocol versions are refused at the edge.
  • Uploaded documents are stored in Cloudflare R2 object storage, which encrypts every object at rest; access requires scoped credentials held only by our backend.
  • Every database query is scoped by customer ID — no customer can read another customer's data.

6. Who processes your documents

The services that touch your document content, by name:

  • openai — AI text extraction and analysis (retention mode above).
  • Cloudflare — document storage (R2) and network edge.
  • Hetzner — the servers our backend and database run on (EU data centers).
  • Postmark — transactional email (your address and email content, never your documents).

7. Human access

On the free trial and the subscription, processing is fully automated — no person reads your documents. The one exception is the paid audit, where a reviewer checks every finding against its source before your report is delivered; that review exists to raise accuracy, and it's disclosed on the audit page before you buy.

8. Deletion timeline & backups

Requesting account deletion opens a brief cancellation window, after which the request is processed. We complete deletion of your personal data and documents within 30 days of your confirmed request. Because we run periodic backups, some data may persist in backup storage for up to 90 days after that before it's fully purged.

9. Not legal, accounting, or tax advice

Leasella extracts information and generates summaries using AI. It is a tool to help you keep track of your documents — it is not legal, accounting, or tax advice, and it is not a substitute for a qualified professional. Always verify critical information against your original documents before acting on it.

10. Contact

Questions about security or data handling? Contact us at privacy@leasella.com. See also our Privacy Policy and Terms of Service.