Security and data
What Chivvy can do in Xero
It reads spend transactions, supplier bills, bank accounts and contacts, so it can work out what's missing. The only thing it writes is an attachment: the file your client sent, on the transaction, bill or bank account it belongs to.
It doesn't reconcile, code, edit or delete anything in Xero. Anyone with access can disconnect a client's Xero at any time.
Nothing goes out without you
Everything Chivvy finds waits for someone in your practice to approve it. Only approved items are chased, on the schedule you can see, from your own address.
Emails are signed with your domain's DKIM key, so mail providers can tell they really came from you. Replies go to your inbox.
Client upload pages
Each client has a private, unguessable link with no login. A link lasts 30 days and every chase email brings a fresh one. You can reset a client's link at any time, which stops every link they've been sent.
Repeated guessing is blocked, and uploads are limited per visitor. If you want an extra step, turn on email codes: the client confirms a six-digit code sent to their email before the page opens, once per device.
Where data lives
The app and database are hosted in the EU, and uploaded files are stored in the EU. Everything is encrypted in transit, and Xero access tokens are encrypted at rest.
Uploaded files are kept while your practice uses Chivvy and deleted within 30 days of you leaving. You can ask for an export before then.
AI, and what it never does
Each uploaded file is read by Anthropic's Claude to pull out the amount, date and supplier, so it can be checked against Xero. Your data isn't used to train any model, ours or theirs.
If you connect Claude, ChatGPT or Codex to Chivvy, the assistant only acts after you sign in and allow it, acts as you, and can be removed from Settings at any time.
Who else handles the data
The companies that handle data for us, and what for. We tell practices at least 30 days before adding or replacing one.
| Railway | Hosting and database, EU region |
|---|---|
| Cloudflare R2 | Storage for uploaded files, EU |
| Resend | Sending email |
| Anthropic | Reading uploaded documents to check them against Xero. Not used to train models |
| Sentry | Error reports from the app, EU. Upload links and personal details are removed first |
| Stripe | Taking payment from practices. It never sees clients' data |
| Plausible | Counting visits, without cookies or personal data. Clients' upload pages aren't counted |
| Steppr | Guided tours inside the app, for practice users only |
The details are in our privacy notice and data processing agreement. Questions to hello@chivvy.io.
Stop chasing receipts by hand
Founding practices lock in a pre-launch price of £40 a month. The offer closes soon, and it takes one call to set up.