VATReviews processes accounting data locally on the Windows device. It does not sell data, show advertising, profile users, require a subscription, transmit telemetry, upload crashes or send data to a cloud AI service.
Data stored locally
- business/VAT/bank/chart configuration;
- immutable imported file copies, hashes, mapping profiles and raw source-row lineage;
- transactions, splits, suggestions, confirmations, rules, exceptions and adjustments;
- deterministic VAT-box impacts, reconciliations, journals and export metadata;
- append-only audit events, local settings and protected backups;
- redacted local operational logs.
Each business workspace is isolated. Historical matching does not cross businesses by default. Explicit shared rules are labelled and user-created.
Optional local AI
AI is disabled until configured. Supported providers use a loopback endpoint on the same device. VATReviews rejects remote endpoints by default, never invokes cloud aliases, and does not pull/manage model files. Only minimal normalised transaction context and allow-listed choices are sent to the local process. Concise results and validation decisions can be audited; hidden reasoning is neither requested nor stored.
Retention and deletion
The user controls local workspace, export and backup retention. Source and audit records are intentionally immutable inside an active workspace to preserve review evidence. A whole workspace can be archived/exported and then deleted by the user with explicit confirmation outside a locked-period review workflow. Deleting a local workspace does not remove independent exports/backups. No remote copy exists for VATReviews to delete.
Diagnostics
Diagnostics are off by default. Standard errors/logs omit or redact full descriptions, VAT numbers, account references, transaction rows, prompts and responses. Enabling diagnostic detail displays a warning. Diagnostic export supports removal of sensitive fields and is saved only to a user-selected local path.
Backups
Backups are manual unless the user opts into a local schedule. They are encrypted and integrity checked. VATReviews never selects or synchronises a cloud folder automatically; the user is responsible for the privacy/security of any chosen destination.
Contact
For privacy questions, email Development@mjsandyoungs.co.uk.