Security & data handling
Your packages are yours. Your rules are yours.
Billing packages carry rates, names & contract terms. Overtrace is built so they stay inside your workspace, so access is deliberate, and so nothing the AI produces changes a number without a person deciding it should.
The problem
Audit data is sensitive in both directions.
Rates are commercial secrets.
A contract rate schedule is exactly what a competitor would like to see.
Names are personal data.
Timesheets list every worker on site, every day.
Decisions move money.
Who disputed what, and when, has to be on the record.
The solution
Deliberate access, separated data & a person on every decision.
Invite-only workspaces
No public sign-up. People join a workspace by one-time invitation, which expires after seven days.
Role-based access
Viewer, reviewer, admin & owner roles, enforced on the server.
Customers never share anything
Your packages, rules & decisions are never visible to another customer, and never become another customer’s rules.
Hardened sign-in
Passwords are stored as salted scrypt hashes, repeated failures are throttled, and resetting a password signs out every other device.
AI reads; people decide
The AI transcribes pages and suggests. Code does the math, and a reviewer makes every decision — each one attributed in the activity log.
Questions
Common questions.
Is our data used to train AI models?
Overtrace uses commercial AI APIs whose terms exclude customer data from model training. Within Overtrace, your data is used only for your workspace.
Can we control who sees what?
Yes. Everyone joins by invitation, and each person has a viewer, reviewer, admin or owner role.
Do you have a security questionnaire?
Ask us through the form below and we’ll walk your IT or security team through how Overtrace handles your data.
Get started
Bring us your worst package.
See Overtrace audit a real T&M billing package in a 30-minute demo. Then prove it on your next two invoices in a 60-day pilot.