Client Workspaces
Keep each client file in its own local space, with separate receipts, statements, exports, review notes, QuickBooks connection state, and QuickBooks write history.
Security model
Receipt Resolver is designed to reduce the number of places client records live. Each client gets a protected local workspace, the app-managed records inside it are encrypted at rest, and finished cleanup work can be removed from the device when the job is done.
Keep each client file in its own local space, with separate receipts, statements, exports, review notes, QuickBooks connection state, and QuickBooks write history.
The local database, imported source copies, extracted text, and generated receipt packages managed by the app are encrypted inside the workspace.
When a cleanup job is finished, remove the local working set for that client instead of leaving old receipts and review files scattered around.
Switching clients reloads the selected workspace. Receipts, statements, review notes, exports, accounting connections, and write history should not blend across files.
The records Receipt Resolver manages for a workspace are encrypted locally. When you export, open, email, sync, or back up a file outside the workspace, that copy follows your device and storage choices.
QuickBooks connection credentials are kept away from receipt records and use the operating system's secure credential storage where available.
Workspace deletion is meant to remove that client's local database, app-managed source copies, generated packages, issue history, and local connection state.