Security reporting
Report suspected security issues responsibly.
Report suspected security issues to the monitored security mailbox. External security review is not complete, and no response-time SLA is published.
Current limitations
External security review and some legal and operational release evidence remain incomplete. A monitored reporting mailbox is available, but no response-time SLA is published.
Reporting
Report suspected issues to security@reconloom.com. Do not include source files, secrets, licence keys or unnecessary personal data. We do not publish a response-time commitment.
Data handling
Source rows are processed on your device.
Supported reconciliation files and rows are processed in the browser or Windows application. Large browser workloads may use local storage. Trial verification, entitlement checks and limited analytics metadata may use ReconLoom network services; see the Privacy Notice for details.
Matching follows the rules you confirm. Review the results before relying on an export. External security review is not complete.
What local-first does and does not mean
Reconciliation source rows are designed to remain on the device while trial, entitlement and limited marketing analytics requests use network services. The risk to data stored on a shared or compromised device is not eliminated by local processing. Review browser storage, installed extensions and device access policies before handling sensitive material.
Verification boundaries
Do not interpret local-first operation as an ISO 27001 certificate, SOC 2 attestation, independent penetration-test pass or permission to process regulated datasets. External assurance and policy approvals remain separate work items. See Privacy and Support.