Clear boundaries. Records you can review.

The product is being built around explicit confirmation, separate workspaces and access controls. Here is what that means in the local development version.

Separate access

Workspace membership controls which records an account can read or change. Viewers can read the spaces shared with them; editing requires the appropriate role.

Original documents

Receipts are stored in a private bucket. Access requires an authorized account, and document-viewing links expire.

Capture and processing

Image text is processed by the development server. Voice recognition depends on the operating system or browser and may use its provider’s service. Review the transcript before creating a draft.

No payment connection

Recording a transaction does not transfer money. Account balances reflect opening balances and saved entries, rather than a live bank balance.