Legal

Security

Last updated November 2, 2026

Invoices are financial data, and Dovewood Capital, LLC, a Texas limited liability company doing business as WorkUnit Labs (“WorkUnit Labs,” “we,” “us”) handles them that way.

Our practices

• Encryption in transit. Uploads, deliveries and this website use HTTPS.
• Used only for your work. Documents are processed only to produce your entries and are never used to train AI models.
• Limited access. Only the people working on your account can see your documents.
• Retention you set. We agree a deletion schedule with you before the first batch, and delete data on request.
• You stay in control. We never post entries or approve payments.

Subprocessors

• Cloudflare – website hosting, content delivery and storage of form submissions.
• An AI model provider – extraction of invoice fields, under terms that do not permit training on your data.
• Stripe (if used) – payment processing. We do not store full card numbers.

We will tell clients before adding a new subprocessor that handles client documents.

Incidents

If we learn of a security incident affecting your data, we will notify affected clients without undue delay, explain what happened and what we're doing about it.

Reporting a vulnerability

Email [email protected]. Please give us reasonable time to fix an issue before disclosing it.

Security reviews

Need a questionnaire completed or a DPA signed? Email [email protected].