buksoOne login, one set of jobs
Each client login can only see the jobs and files it uploaded. The check runs on our server on every request, not just in the page.
AI-Powered bookkeeping
Security & privacy
Your statements are sensitive. Here is how we look after them, in plain English, and what we don't claim.
Privacy & data isolation
Your books are yours alone.
Your files are read by our own AI. Our staff may look at a file only to help you, fix a fault, or for security, fraud or legal reasons, and every view is logged. The full list of who may see your documents is in our Privacy Policy, Section 5.
Need-to-know staff access
Our team looks at a file or line only in the cases listed in our Privacy Policy, Section 5. Your profile stays editable only by you, and staff views of it are logged.
Audit trail
Logins, uploads, downloads, approvals and changes are recorded with who and when.
Accounts
Two-step verification and strong passwords
Two-step verification
Use an authenticator app for a 6-digit code at login, with single-use backup codes. Required for our staff; available to every client.
Lockout protection
Repeated wrong passwords lock the account for a while, and sign-in attempts are rate-limited.
Verified email
You confirm your email before uploading, and finished files are only ever sent to that verified address as login-protected links.
Bukso AI
What Bukso AI is, and where your data is
What Bukso AI is
Bukso AI is built on open-source AI models and our own Bukso AI knowledge bank. We run it on rented servers and GPU computers in Canada or the United States (rented servers), and on our own computers in Alberta, Canada. Your documents and transaction lines are never sent to OpenAI, Google, Anthropic or any other AI company, and no provider uses them to train its AI.
Where your data is stored
Encrypted files, your account and your bookkeeping lines are hosted by Render in Oregon, USA. AI reading happens on rented servers and GPU computers in Canada or the United States (rented servers), and on our own computers in Alberta, Canada. Email goes through Zoho in Canada and card payments through Stripe. While your information is outside Canada, it is subject to the laws of that country. Every service provider →
If Bukso ever stops
At least 60 days' notice, downloads stay open, renewals stop and unused prepaid time is refunded.
Encryption & storage
Encryption and storage
Passwords & 2FA secrets
Passwords are stored only as strong one-way hashes (argon2id). Two-step secrets are encrypted at rest.
Private file storage
Uploaded files are encrypted before they are stored, and kept in private storage, never in a public web folder. Every download checks who you are first.
HTTPS
Data is encrypted in transit (HTTPS) between your browser and the client portal.
If something goes wrong
Emergency shutdown: if we confirm that an attacker has actually got into our systems or customer data (not just a blocked attempt), we may take Ai Book Sort offline at once to protect your data. We tell you what happened as soon as we safely can, notify the privacy commissioners and affected people as the law requires, reopen downloads as soon as it is safe, and add lost paid membership time back (Terms 17.4).
If Bukso ever stops: at least 60 days' notice, downloads stay open, renewals stop and unused prepaid time is refunded (Terms 8.10).
What we don't claim
We don't claim any security certification or third-party audit. No system is perfectly secure; we use common, well-established security practices and keep improving them. Questions? Ask us.
AI-Powered bookkeeping
Questions about your data?
Ask in chat or contact us. A human will answer.
- Your total, with transactions counted, before you pay
- You confirm anything the AI flags
- Export files for QuickBooks Online
- Serving Canada and the United States