Security

BillGap processes selected staffing and billing CSV files locally in browser memory. No scan-file upload endpoint, system credentials, automated integration or production writes are used.

The Verified boundary

BillGap only labels a finding Verified when the source records satisfy all required validation checks. Unsupported or ambiguous records are never included in Verified totals. Parsing a file does not establish that its contents are correct.

Vendor report certification is pending genuine-report review. Mapped uploads can establish gross hourly USD source-record discrepancies when each finding passes the source-evidence contract and all financial gates. Missing or conflicting evidence remains Review or Unsupported. Neither a preset nor the fictional reference sample establishes genuine tenant compatibility.

Separate data paths

The landing form sends the name, email, agency and systems you enter to Netlify Forms. Scan files, worker identities, invoice numbers and billing rates are not attached. Do not put sensitive report data in the contact fields or an email.

Memory and browser storage

Clear loaded data removes file selections, interpreted rows, confirmations, results and evidence from application state. Refreshing or closing the page ends the scan session. The scanner does not save raw files in localStorage, sessionStorage, IndexedDB or cookies. Clearing application state is not a promise of forensic erasure by the browser or operating system.

Connections and analytics

The scanner uses locally hosted application code and a content security policy blocking outbound connections. It has no advertising pixels, session replay or third-party analytics. Normal page requests still reach the hosting provider; see Privacy.

Human review and responsible use

The workflow is read only. Findings are reconciliation aids and must be checked against source records before financial action. Use only files you are authorized to process on a trusted device.

Security contact

Email tyler@trybillgap.com with a description of a security issue. Do not attach real staffing files. BillGap does not claim SOC 2, ISO 27001 or other certifications.