We do not use your bank transactions, receipts, or any of your financial records to train general-purpose AI models — ours or anyone else’s. We require zero-/short-retention and no-training terms with every AI provider we use.
Where AI is used in Kountr
- Transaction categorization — suggests a category for each new Plaid transaction.
- Receipt & invoice OCR — extracts vendor, date, totals, line-items, and tax from images or PDFs.
- In-app assistant — answers natural-language questions about your books (“how much did I spend on fuel last quarter?”).
- Anomaly detection — flags duplicates, suspected missing HST, and unusual amounts for human review.
- Drafting — proposed journal entries, invoice descriptions, year-end notes. Always requires your approval before posting.
What data the AI can see
Depending on the feature, inputs to AI can include: transaction descriptions and amounts; the contents of receipts/invoices you upload; your chart of accounts; vendor and customer names; your question or instruction; and a small amount of recent context from your workspace needed to answer well.
What never leaves Kountr in an AI request:
- Your password or any authentication credential.
- Your bank login. Bank credentials go to Plaid, not Kountr — Kountr never has them.
- Full credit-card numbers (we never receive them — Stripe handles them).
- SIN/SSN or government-issued ID numbers.
We redact these patterns before any external call.
The rules our AI providers must meet
We only use AI sub-processors whose contractual terms include all of the following:
- No training on your data. Inputs and outputs from Kountr are not used to train, fine-tune, or improve their foundation models or features.
- Zero or short retention. Where available, we use zero-data-retention (request processed and immediately discarded). Where a short window is required for abuse review, it is capped at 30 days and encrypted at rest.
- No third-party sharing beyond what is needed to deliver the inference.
- DPA in place, with confidentiality, security, and sub-processor controls.
- Regional processing in Canada or the US where possible; we disclose where each provider processes data.
The AI providers we use today
- Anthropic (Claude) — categorization, the in-app assistant, drafting. Enterprise terms, no training, zero/short retention. US processing.
- OpenAI — OCR fallback and some categorization. Enterprise/API platform terms, no training, zero/short retention. US processing.
When we add or change AI providers, we’ll update this page and the sub-processor list. Material changes are emailed to account owners.
What AI is allowed to do on its own
AI in Kountr is an assistant, not an actor. Suggestions are never posted to your books automatically. The Service does not make solely automated decisions with legal or similarly significant effects under GDPR Article 22 — a human approves before anything is filed, paid, or sent.
Accuracy & your responsibility
AI output can be wrong, incomplete, or out of date. Kountr is not a chartered professional accountant, tax preparer, or advisor. Review AI output before relying on it for tax filings, payments, or accounting decisions. We surface confidence indicators where useful and we encourage you to correct mistakes — corrections improve your own workspace’s rules (locally), and only de-identified, aggregated signals (“suggestion accepted vs. corrected”) feed back into our system-wide categorization quality.
Your controls
- Turn AI off. Workspace owners can disable the AI assistant in Settings → AI. Rule-based categorization continues to work.
- Per-document opt-out. You can mark sensitive receipts or transactions “do not process with AI.”
- Delete AI history. You can clear assistant conversation history at any time.
- Export & audit. Every AI-generated suggestion is logged with its source and is included in your export.
Logging & retention
- AI request/response logs (for abuse and quality monitoring) are retained for up to 30 days, then deleted.
- Workspace-level AI usage metrics (counts, latency) are retained in aggregate for billing and capacity planning.
- Provider-side retention follows the rules in “The rules our AI providers must meet” above.
Questions
Email info@kountrfi.ca with any questions about how AI is used in your workspace, or to request the current sub-processor list with regions and contract dates.