Security and data

RoutePayAudit is operated by Tigran Avakov, a self-employed individual, Mirzo-Ulugbek 45A, 100007 Tashkent, Uzbekistan.

You can sign in with your email address and password. We store a salted password hash, not the password itself. Email verification and password reset use links that expire and can be used only once. Keep access to your email account: it is used to recover access.

The session cookie is marked HttpOnly and Secure, is only sent to this site, and is renewed as you use the service. Signing out ends the session on our side.

Your documents are stored as encrypted files in object storage at Cloudflare. Each file has its own encryption key and is bound to its company: copying its stored bytes to another company does not make it readable there. You supply the files; we do not fetch them from Amazon's portals.

Claude Haiku reads document text through Anthropic. Every field used by a check must pass source verification; a matching number elsewhere in a file is not enough. Unsupported, missing, uncertain or incomplete information becomes a question. A scan without usable text may require an original readable file.

We use a session cookie to keep you signed in. The site has no analytics, advertising or tracking pixels. Fonts are served by us. The payment page loads Paddle's checkout script so that you can pay; card details go to Paddle, not to us.

The public pages use a strict content policy. The pages that change something refuse a request that comes from another site.

What the service holds, for how long, and who else handles it is in the privacy policy.