No transit
The page that reads your statement cannot make an external request. The browser enforces this through its Content-Security-Policy. Open DevTools and watch the network panel stay empty.
Security & privacy
No upload: a breach of our servers cannot reach your data, because it is never there. No credentials: Enclave cannot move money or read a live balance. No third-party processor. The engine is deterministic — AI drafts its parsers offline at build time; at runtime it is pure arithmetic.
Live demonstration
A scripted ledger streams through the reconciliation gate. Six rows tie. The seventh carries a transposed digit — and the gate does exactly what it does in production.
The stated balance disagrees with the computed one by £27.00. Two different corrections could fit the evidence, so Enclave stops: a red banner, a non-zero exit, and no export until the source is checked.
Self-audit
The panel on the right reads this page's own performance log, live, and counts every request the browser has made since you arrived. If an external request ever appeared, the counter would turn red — on our own security page.
Your browser is the auditor.
The claims
The page that reads your statement cannot make an external request. The browser enforces this through its Content-Security-Policy. Open DevTools and watch the network panel stay empty.
We cannot leak, sell, or lose what we never receive. There is no server-side copy of your transactions anywhere.
No open-banking consent, no stored password, no API key to your bank. Enclave cannot move money or read a live balance. The blast radius of any compromise is one document.
AI drafts the parsers offline, at build time, where it can be reviewed. At runtime the engine is arithmetic. Every figure is replayable, byte for byte, forever.
Where the arithmetic cannot prove a figure, Enclave stops and reports exactly what failed, instead of exporting a guess.
The whole run