Security

Your data stays yours.
We designed it that way.

Restful AI is built so your documents and business data are never stored on our servers. Everything flows directly between your browser, your AI provider, and your ERP.

How we protect your data
Zero-knowledge encryption
Your ERP credentials are encrypted with a key derived from your password. We never store the encryption key — it exists only in memory during your active session. Even we cannot access your credentials.
Your documents never touch our servers
Uploaded files are parsed entirely in your browser. Document content is sent directly to your chosen AI provider and ERP system — we do not store, log, or retain any of it.
Pass-through architecture
When you submit data to your ERP, it flows directly from your browser to your system. Our server acts as an authenticated relay — nothing is persisted in between.
Minimal data footprint
We store only what is necessary to operate your account: your email, encrypted credentials, and usage metrics for billing. We do not store your documents, extracted data, or any of your business information.
What we store vs. what we don't

A transparent breakdown of how your data is handled.

Email & nameStored
Used for account identification
PasswordStored
Securely hashed — original password is never stored
ERP credentialsStored
Encrypted — decryptable only with your password
Usage metricsStored
Token counts per request for billing
Uploaded documentsNot stored
Processed in your browser, never sent to our server
Extracted data (PO lines, pricing, parts)Not stored
Lives in browser memory only
Sales orders & invoicesNot stored
Sent directly to your ERP, not retained by us
Document text or imagesNot stored
Sent to the AI provider for extraction, never stored by us

Have security questions?

We're happy to walk through our approach in detail.

Contact us →