Security

Private documents. Controlled access.

Documents are stored privately, client links expire, and your firm decides who sees what.

  • Stored in the EU
  • Data processing agreement included
  • No card required
The BilagPilot mascot protects documents with a security shield

Protected from client to ledger

  1. 1. Each client gets their own link

    The link shows only that client's own requests and has an expiry date.

  2. 2. The file is stored privately

    Encrypted in transit and stored privately in the EU. File type and size are checked.

  3. 3. Your firm signs in to open it

    Only users with access to the client can open the file.

  4. 4. Encrypted ledger connection

    Access keys are stored encrypted, and your firm decides what is sent.

You stay in control

Roles and assigned clients

Give each user the right role. From the Firm plan, accountants can be limited to the clients assigned to them.

Links with an expiry date

Choose a default of 7, 14, 30 or 60 days. Replace a link and the old one stops working immediately.

Traceable history

Link opens, uploads, reminders and status changes are logged with a timestamp.

Clear responsibility

Controller

Your accounting firm

Decides what is collected and who gets access.

Instructions

Processor

BilagPilot

Processes the data only on your firm's instructions.

  • The data processing agreement is part of the terms.
  • If a personal data breach affects your data, we notify you without undue delay.
  • Subprocessors are listed in the privacy policy.

Security questions

The link uses a long, random code, applies to one client only and has an expiry date. It cannot be used to open files that were already sent. If it reaches the wrong person, replace it and the old link stops working immediately.

Any other questions?

You get an answer from the person who builds BilagPilot.

kevin@bilagpilot.no

Suspect a security issue? Include the time and the affected account or link, but do not email documents.

Test safely with your own clients

No card required. The trial does not convert to paid automatically. The 14 days start after the first successful import of at least one client.