SaaS Data Security Built Around Browser Side Import
SaaS data security starts with how little data has to move. SassList reads your statement in your own browser, sends only cleaned billing descriptors for classification, and never asks for a bank login. This page explains exactly what is read, what is sent, what is stored and who can see it.
Your statement is read in the browser
When you drop a CSV, XLSX or PDF export, the file is parsed on your device. The raw file is not uploaded and is not stored on our servers. The parsed result is kept for your session so you can see the list, and it is saved to your account only when you choose to keep it.
Only descriptors are sent
Most vendors are recognized by a dictionary that ships with the page, so no request is needed at all. For a descriptor that looks like software but is not in the dictionary, only the cleaned descriptor text is sent for classification. Account numbers, names, balances, card numbers and full transaction lines are not part of that request.
- No bank login and no bank connection
- No card numbers and no account numbers requested
- No raw statement file stored
- Descriptors only for unknown vendors
What is kept in your account
An account holds the SaaS list you save: vendor, category, cost, billing cycle, last charge, predicted renewal and the notes you add. Imports are used to build the list and the raw file is not retained.
Retention and deletion
Your list stays available while your subscription is active. When you close the account, the list and your notes are deleted. You can also ask for earlier deletion at any time by writing to [email protected], and we confirm by email when it is done. Deleting a tool or an import does not return the usage it counted against your plan period.
Renewal alerts and the weekly digest go to the address on your account. We do not use account email for anything unrelated to the service, and we do not sell it. The full details are in the privacy policy.
Roles on every shared plan
On Team, up to 10 team members join with viewer or editor roles, so people who only need to see renewals cannot change the list.
SSO and audit log on Business
Business adds SSO (SAML), roles and permissions, an audit log of changes, invoice billing and priority support with a response time commitment. Multiple entities and currencies and budgets per department are kept separate by the same roles.
Security documents for larger groups
Groups with several companies or more than 500 people can request custom limits, a security questionnaire, a data processing agreement and annual invoicing. Write to [email protected] and the documents come back by email. See the Enterprise line on the pricing page for the plan overview.
What we do not claim
SassList does not hold third party certifications and does not claim any. We describe what the product does and does not do, so your own review can judge it. If your policy needs a written answer to a specific question, send it to [email protected].
For how the import works end to end, read SaaS management software. For the full feature set, see subscription management system.
Build your first list from one export
Upload one export and see what your company pays for software.