Security
Where your files go, and what happens to them
You hold your clients' books, so where they are sent, who can read them and when they are deleted are the first things worth checking. Here they are, including the limits.
Free to create. No subscription, and credits never expire.
Only our servers hold your files; the AI sees redacted fragments
Everything about how your data is handled follows from this.
Our servers
Your uploaded files, each encrypted under a key that belongs to that company alone, and kept until you delete them. Every figure is computed here.
The AI model
Only what one step needs: the shape of a sheet, a small sample and ledger names, with names and identifiers replaced by tokens first. Never a whole file, and never a figure to calculate.
Your browser
Files leave it over an encrypted connection and the finished workbook comes back. Nothing from your files is kept in the browser.
No member of staff can open your file, and every opening is logged
Encrypted the moment it arrives
Every file is encrypted under its company's own key before it is stored. Each company has a separate key.
Kept for you, opened by nobody
Uploaded files are kept until you delete them. Each company's Files and settings page lists them, lets you download or delete any of them, and shows every time one was opened and why. No member of our staff has a screen, tool or role that opens a file.
Redacted before any AI sees it
Party names, employee names, tax numbers, bank details, emails and phone numbers are replaced with tokens first. The AI suggests where a ledger belongs and drafts sentences; it never produces a figure.
Deleting means unreadable
Deleting a company destroys its encryption key, so its data and files cannot be read again by anyone — not merely marked as deleted.
One session, and a second check for anything irreversible
A new sign-in ends the previous one, and there are no shared logins. A board you choose to share goes out as a read-only copy, frozen when the link is made, that expires and that you can withdraw; it opens no chat, file or workbook. Exporting data, deleting a company or an account, and changing credentials each ask for your password again.
Our own access is limited and visible to you
Support access covers one company at a time, is recorded, and emails you on every day it is used.
What we do not claim
No external security audit has been carried out and no compliance certification is held. Your files are on our servers while they are kept — encrypted, and opened by no member of staff, but there. And customer sign-in has one factor. If any of those is a requirement for your firm, it is better to know now.
What firms ask before uploading a client's books
Does my client's trial balance get uploaded?
Yes. It is sent over an encrypted connection, encrypted on arrival under a key unique to that company, used only for the runs you pay for, and kept until you delete them. No member of our staff has a screen, tool or role that opens a file: one is decrypted only in memory, by a run or a question you start or by your own download, and every such opening is recorded on the company's Files and settings page where you can see it.
Does the AI see my accounting data?
Only a redacted fragment of it, for the one step it is performing: a sheet's structure, a small sample and ledger names, with names and identifiers replaced by tokens. It never receives a whole file, and your data is not used to train AI models.
Is it safe to upload my accounts to an AI tool?
It depends on what the tool does with them, so ask four things of any of them: where the file is kept, who can open it, what the AI model receives, and what happens when you delete it. Here the file is encrypted under a key that belongs to that company alone, no member of our staff can open it and every opening is recorded for you, the AI receives only redacted fragments for the step it is performing and never a figure to calculate, and deleting the company destroys its key. A general chatbot you paste a trial balance into answers those questions very differently.
Is there two-factor authentication?
Not for customer accounts. Sign-in is by password, with one active session per account, sign-in throttling, a password check before anything irreversible, and an email alert when a new device signs in. Stated plainly so you can weigh it: use a password manager and a password unique to this service.
What happens if I delete my account?
Deletion asks for your password and your email address. The encryption keys are destroyed, which makes the stored data and files unreadable. Unused credits are forfeited, and an account cannot be deleted while work is still running.
Where is my data stored?
In the United Kingdom. Your account, your uploaded files and each company's memory are stored and processed in London, which the European Commission recognises as giving personal data adequate protection. The redacted fragments the AI reads are processed in the United States.
Who else processes my data?
The privacy notice lists every processor involved and what each one handles. It is the document written for that question, and it is kept current.
The longer answer, including what to check before pasting accounts into a general chatbot, is on is it safe to upload financial statements to ChatGPT?
Read next
- How a trial balance becomes a monthly MIS, stage by stageUpload your raw accounting data and take the workbook. Ledgers are mapped for you, and later months reuse the mapping with no AI calls at all. Here is each step in detail.
- Privacy noticeHow Magic MIS handles personal data: what is collected, what happens to the files you upload, who processes it, and your rights in India, the UK and the EEA.
- Client reporting software for accounting firms and CAS teamsManagement reporting across a portfolio of clients, without a junior rebuilding each workbook by hand. One mapping per client, reused every month, with every number traceable.
See it on your own month
Create an account, load last month's trial balance, and get the report — paid per action.
Prepaid credits, no subscription. Credits never expire.