Data protection and privacy policy.

Under the UK GDPR and Data Protection Act 2018, Axiom acts as the Data Controller for your account authentication credentials, and as the Data Processor for the business receipts, invoices, and statutory purchase ledger records you process. Direct inquiries to hello@getaxiom.app.

We process account identity data (work email, trading name, VAT registration number), financial document figures (supplier letterheads, line items, net pence, VAT rates, gross totals), and inbound mailbox correspondence (<handle>@inbox.getaxiom.app).

Every document uploaded is verified with integer pence arithmetic (net_pence + vat_pence === gross_pence). Original PDF and photo scans are permanently stored in your dedicated filing cabinet for the statutory HMRC 7-year audit retention window.

Unlike monolithic SaaS platforms with shared database tables, each workspace operates inside a physically isolated SQLite database file (books.sqlite). You can download your complete unencrypted database binary, CSV ledgers, and raw document archive anytime via workspace settings.

When you connect Xero, QuickBooks Online or Sage Business Cloud, verified bills and receipt attachments are transmitted directly via encrypted OAuth 2.0 API channels. We never sell, monetize, or train public AI models on your private purchase records or supplier pricing.

Closing your account executes an atomic purge: all active database connections terminate, your physical tenant directory and receipt files are permanently unlinked and deleted from disk, and all credentials are irreversibly purged.