Handing a tool access to your finances is a big deal. Here is exactly how Savra handles your data, in plain English.
Google Cloud australia-southeast1 (Sydney), with public-access prevention and object versioning on storage.
Each account has its own database and its own storage bucket, chosen from your signed-in session, never from anything your browser sends.
TLS 1.2+ in transit, AES-256 at rest on Google Cloud.
App-based TOTP, offered in Settings and after you connect your books.
OAuth 2.0 with single-use anti-CSRF state, PKCE on Xero. You sign in with your provider, never a password given to Savra.
Savra runs on Google Cloud in Sydney and reads your accounting data to analyse it. Its figures are estimates from your linked books, not financial advice, and nothing it produces is a substitute for your accountant.