Safe by design
Security for your invoices and email. Oteo looks after your administration. It never moves money, never logs into your bank and never sends mail for you.
- Your mailboxReads invoices and receipts. Never sends or deletes mail.Never sends
- Your teamSees only the workspace you invite them to.You decide
- Your bankOteo never logs in and never pays.Never
Money stays with you
- Oteo never pays anything. It prepares payments and tracks whether they happened; you pay from your own bank.
- Oteo never logs into your bank. Bank lines come in as a file you upload yourself.
Your mail stays yours
- Oteo reads your mail only to find invoices and receipts. It never sends or deletes mail. If you turn on filing, Oteo labels invoice mails or moves them to a folder.
- Mail whose sender cannot be verified is never processed automatically; it waits for you.
- Signing in with Google only confirms who you are. It does not give Oteo access to your Gmail.
Who can see what
- Your workspace opens only for the people you invite. Owners, admins and reviewers handle invoices.
- Your accountant can get free, read-only access.
- An Oteo specialist only looks at a document when you ask for help with it. Every look is logged with the reason and shows in your workspace activity.
AI with a person behind it
- To read a document, Oteo uses AI from Google (Gemini), Anthropic (Claude) and OpenAI. Oteo does not use your data to train AI models, and Anthropic and OpenAI do not train their models on it either.
- When Oteo is not sure what a document is, it asks you with one tap instead of processing it.
Files and sign-in
- Uploads are PDF, JPG, PNG, WebP or iPhone photos (HEIC) up to 8 MB. Oteo checks each file by its content, not its name, and stores it privately.
- No passwords: you sign in with Google or with a link or code in your email.
Links and files from your mail
- Oteo only fetches an invoice link by itself when it leads to the sender, a known invoice platform or a supplier you confirmed. Anything else waits for you, and look-alike domains are marked red.
- Every link from a mail opens through an Oteo page that shows where it goes before you leave.
- PDFs with hidden scripts or other active parts are marked and always wait for a person. Oteo never runs them, and keeps every original unchanged, as the law requires.
Where your data lives, and leaving
- Your data is kept in Oteo's database at Supabase and on Vercel's servers, in the EU. It is never sold or used for advertising.
- You can export your administration at any time and ask Oteo to delete your workspace.
Try it with your own invoices
Connect your email and see what Oteo finds on day one. No card needed. If it's not for you, you pay nothing.