Security and privacy
Your business's money is private. We treat it that way.
What we do to keep your financial data safe, in plain words. If something here is unclear, or you want more detail for your auditor, write to info@arjava.in.
Your data is yours alone
Many businesses use ExpenseIQ, and none of them can see each other.
-
Walled off from every other customer
Every request the app answers is limited to your organization. A person from another business cannot find, open or search your records, and our automated tests check this separation.
-
Each person sees their part
Roles are set per company. Cardholders see their own cards and claims, approvers see what they are asked to approve, and auditors can look at everything but change nothing. Only your account owner manages people and settings.
-
Companies inside your group stay apart too
If you run several companies, each one keeps its own cards, bills and books. People only see the companies you give them.
Money moves only when the right people say so
Approvals are where mistakes and misuse would cost you, so they get the most care.
-
A one-time code to approve a payment by email
Approving vendor payments from an email link needs a one-time code sent to the approver, so a forwarded email is not enough to approve them.
-
A record of who did what
Approvals, uploads and payments are recorded with the person's name and the time. Closed months stay closed.
How your data is stored
Plain facts about where your data lives and how it is protected.
-
Hosted in Mumbai, India
ExpenseIQ runs on Amazon Web Services (AWS) in the Mumbai region. The emails we send go through Amazon SES in Mumbai.
-
Encrypted on the way
The website and the app only work over HTTPS, so everything between your browser and us is encrypted.
-
Sensitive details stored encrypted
Bank account numbers, passwords and keys for your integrations (such as your mailbox, Tally server and AI keys) are stored encrypted. Login passwords are stored only as a one-way hash, so nobody can read them, including us.
-
Backups, and how long they last
We keep backups so we can recover from a failure. Each backup is deleted after 30 days.
Who at Arjava Group can see your data
As few people as possible, and only to help you.
-
Limited staff access
Only a small, named group on our team can reach the servers or customer data, and only to keep the service running or when you ask us for help.
-
Our console manages accounts, not your books
The tool our team uses to set up customers can see your organization's name, its companies and its users. It is built so it cannot open your transactions, bills or payments.
How AI is used
Some features use an AI service: reading a bill or an email to fill in a payment request, sorting transactions into categories, and writing your monthly summary.
-
Only what the task needs
When one of these features runs, the text it needs (for example the bill email, or the lines of a statement) is sent to the AI provider set up for your account, which sends back the answer. Nothing else is sent.
-
Decisions stay with people
AI suggests and flags; it never approves or pays anything. A flag is a reason to look, not a verdict. Ask us which AI provider your account uses.
Leave whenever you like, with everything
You are never locked in.
-
Download everything, any time
Your account owner can download all your records as spreadsheet files, with the original bills and statements, in one zip you can open without us.
-
Closing your account
When you leave, download everything first, then ask us to close the account. We erase your records and files from the app, and they drop out of our backups within 30 days.
Found a problem? Tell us.
If you think you have found a security issue, write to info@arjava.in. We will reply, look into it, and tell you what we did. How we handle the details you send through this website is in our privacy notice.
3 months free for one company · no card needed