How we protect your information

Your data is encrypted in transit and at rest. SINs are collected on a separate end-to-end encrypted form. We never sell your information or share it beyond the CRA and the service providers listed in our Privacy Policy. Only an experienced bookkeeper reviews it, and documents are deleted once the CRA record-keeping period (6 years) ends.

Chat with Lily runs entirely in your browser: nothing you type is sent to us or anyone else, and nothing is stored. Please do not enter personal or tax information in the chat.

Client portal (bookkeeping clients, invite only). You sign in with a one-time code sent to your email, through Cloudflare Access, and sessions last up to 30 days. Your receipt photos, business documents, notes and categories are stored in Cloudflare R2 and D1, encrypted at rest and kept private (never public). Cloudflare operates globally, so data may be processed or stored outside Canada. Only you and Northleaf (admin) can access your files, using short-lived download links (about 5 minutes). The app has no trackers or analytics, and uses your camera only when you tap Scan receipt.