Separate businesses
Each business is isolated. The server sets the tenant context, and the database enforces row-level security so one customer cannot read another’s records.
Security
Synagoo collects invoices only after you approve access, keeps each business separate, and lets a person review what AI proposes before it is used.
Synagoo can change only the Drive folder and Sheet it creates in your Google account. It cannot edit your other files, delete them, or send email.
Synagoo reads Gmail only after you authorize it. That access stays limited to the Google scopes you approve.
You can see what was collected and what is still waiting for a person to check.
The Drive folder and Sheet are created in your Google account. They remain there until you delete them.
Each business is isolated. The server sets the tenant context, and the database enforces row-level security so one customer cannot read another’s records.
Invoice files are stored in private storage. Links used for review expire quickly.
Connections use HTTPS. Google refresh tokens stored by Synagoo are encrypted.
An action runs only after Synagoo checks that the person is allowed to take it.
Logs are structured and audit records are redacted. Runtime logs are designed not to include invoice contents, email addresses, filenames, or access tokens.
AI proposes invoice fields such as supplier, amount, and date. An authorized person approves or excludes the record. During beta, these results do not make legal or similarly significant decisions, and automatic acceptance stays off unless you agree to it separately.
No system is completely secure. Email support@synagoo.com if you suspect a compromise. Synagoo notifies affected customers of a qualifying personal-data breach as required by law and the Data Processing Addendum.
Security contact
support@synagoo.comThe measures are described in the Privacy Notice. Confidentiality and breach notice are in the Terms.
Start Free