JuSenseSheet is built local-first. No cloud account required, no data uploaded without your consent, no telemetry phoning home. Every security decision was made to protect your clients' financial data.
These aren't promises — they're technical constraints built into how JuSenseSheet works.
Every PDF you drop into JuSenseSheet is encrypted at rest using AES-256-GCM — the same standard used by banks and government systems. The key is derived from a machine-local secret and never leaves your device.
Algorithm: AES-256-GCM
Key derivation: PBKDF2-SHA256
Nonce: 96-bit random per file
JuSenseSheet runs entirely on your computer. PDF parsing, field extraction, vendor matching, and export generation all happen locally using Python. No internet connection is needed for normal operation.
JuSenseSheet does not collect usage analytics, crash reports, or any behavioural data. There are no tracking pixels, no error-reporting SDKs, and no third-party analytics embedded in the application.
What we never collect:
Invoice data · Vendor names · File names · Usage patterns · Keystrokes
Pro license keys are cryptographically signed and verified on your device. Activation binds a key to your machine; some products confirm the licence is still valid with a lightweight periodic check that sends only the licence key and device identifier — never your documents or data. The app works offline between checks.
Signing: Ed25519 / HMAC-SHA256
Checks send: key + device id only
Works offline between checks
Your data is stored in a local SQLite (sql.js) database in your browser, with PDFs encrypted at rest. Export everything as CSV or XLSX at any time, or use Backup & Restore to capture the full local database in one .jsbackup file. Uninstalling JuSenseSheet leaves no residue — clear browser site data and it's gone.
Every outbound connection JuSenseSheet can make — and why.
| Destination | When | What's sent | Required? |
|---|---|---|---|
| jupitersense.com | Never — no update checks or license pings | Nothing | Never |
| Any analytics / tracking | Never | Nothing | Never |
You can verify this yourself: JuSenseSheet is a local FastAPI server — run it with a packet sniffer and confirm.
Found a security issue in JuSenseSheet? Please report it privately. We take vulnerabilities seriously and will respond within 48 hours. We do not operate a formal bug bounty program yet, but we will credit you publicly (if you wish) after a fix is shipped.
security@jupitersense.comFree for 50 invoices/month. No account needed. Download and run in under two minutes.
Install Free — Free