Legal
Security
Last updated June 18, 2026
ClosePack handles financial data, so we are deliberate about how it is processed and stored. Here is our approach in plain terms.
Where your data lives
The interactive demo and the tie-out on this site run entirely in your browser. The files you open are read into memory and processed locally. Those pages have no save feature, so nothing is uploaded to us.
The signed-in product is different. It saves your work automatically to your private, access-controlled workspace, so a closed tab or a failed machine does not lose it. There is no separate save step. How that workspace is protected is described below.
Encryption in transit
This site and the product are served over HTTPS, so traffic between you and ClosePack is encrypted in transit.
Isolation for signed-in data
Work saved in the signed-in product is stored in a Postgres database with row-level security, so each account can only read and write its own data. We follow least-privilege practices for the access our own systems have to that data.
Scope
ClosePack is the reporting layer. It does not move money, connect to bank accounts, or initiate transactions. It reads the numbers you bring and helps you present them.
Reporting a vulnerability
If you believe you have found a security issue, please tell us at hello@closepack.io and give us a reasonable chance to address it before any public disclosure. We appreciate responsible reports.