Book a call

DRAFT — not reviewed by a lawyer. Do not publish until a Texas attorney approves.

Security at Haltr

Our promise

Haltr flags. Your people decide. Haltr never moves money.

We read the files your firm sends, and we point out what looks wrong. We never pay a bill, change a bank account, or log in to your bank or software. That's on purpose: it means a fake invoice or a hacked email can't make Haltr pay anyone.

Last updated {{DATE}}.

What we take, and what we don't

  • We take files, not logins. Exports of bills, bank statements, rent rolls, work orders, vendor lists and call logs.
  • In our records, bank account numbers are kept as the last 4 digits plus a scrambled fingerprint we use for matching.

Where your data is

  • Today: on the founder's laptop, with full-disk encryption. The laptop also runs the founder's other projects, not only Haltr. The Haltr app can't be reached from the internet.
  • Raw files are deleted {{RAW_UPLOAD_RETENTION_DAYS}} days after processing. Free-check files are deleted within 10 business days.

How our AI is boxed in

  • When the AI reads your files, it can't browse the web, run code, send messages or move money.
  • Our code, not the AI, decides whether an amount or account is accepted. If the AI's numbers don't match the document, a person checks.
  • We test this with attacks: fake invoices with hidden instructions, look-alike vendor emails, and "we changed our bank" requests.

Payment-change protection

Any new or changed bank account is flagged STOP. We never change payment details from an email. The fix is a phone call to a number you already have on file, and a second person approves.

Testing and proof

  • Every software change runs automatic checks: secret scanning, a test that one client's data can't show up in another's, and security scanners.

If something goes wrong

We tell you immediately if we find a breach affecting your data, and within 24 hours at the latest. We help you with the notices you may have to send.

What we don't have yet (and when)

  • SOC 2: not yet. We'll start when our clients need it. We can fill out your security questionnaire now.

Documents