Excluded
Raw invoices, generated PDFs, emails, line items, bank rows, SMTP secrets, OAuth tokens, and full customer lists.
Local-first security posture.
The Vigil workflow runs on the customer machine. Source spreadsheets, generated PDFs, customer names, bank rows, and mailbox credentials stay local by default. The assisted handoff produces local receipts for install, first invoice dry run, readiness, activation, progress, and support.
- No LLM calls in the customer workflow
- No accounting or bank API dependency in v1
- Redacted support bundle for support evidence
- Human approval before any customer-visible reply
- No hosted upload form in the pilot workflow
Support evidence
Support starts with doctor checks, status, dead-letter counts, log counts, impact counts, version, platform, and non-reversible fingerprints.
Controlled
Dataset exports require consent and contain operational event metadata only.