Security & Compliance
Your data, our posture
CostLens processes the inputs you submit for analysis. This page states, plainly, what we handle and what we do not claim.
What we handle
agent descriptions and spend samples used to draft an attribution.
Data handling commitments
- Submissions run the product pipeline and are retained only as long as needed for your saved history (paid tiers) or until you delete the run.
- We apply access controls consistent with GDPR Art. 32 (security of processing) where personal data is processed.
- BYOK keys (Enterprise), when offered, are stored server-side only and never exposed to the browser.
Honesty rule: CostLens attributes the sample you paste. It does not replace the provider invoice or guarantee a lower bill.
Our compliance posture
- CostLens is decision-support, not a law firm, clinic, or certified auditor.
- For binding advice, consult a qualified professional in the relevant domain.
Subprocessors & payments
- Payments are processed by Waffo Pancake (merchant of record).
- See Privacy and Terms for full terms.
Sources: the spend sample you paste · agent ids · the dimension you choose.