Authenticated account access
Dashboard pages, personal records, archived records, account settings, and receipt-photo routes require an authenticated EaseRecord account.
Data & Security
Practical safeguards for personal records and account access.
EaseRecord is designed to keep each customer’s records connected to their authenticated account and to limit access to private information. This page explains the safeguards currently built into the service without claiming protections that have not been implemented.
Hashed passwords
Account passwords are stored using Laravel’s password-hashing system. EaseRecord does not need to store or retrieve a readable copy of a customer’s password.
Account-scoped records
Record operations are scoped to the authenticated customer. A requested record must belong to that account before EaseRecord will display or modify it.
Request protection
Forms that create, update, archive, restore, or delete information use Laravel’s request-validation and cross-site request-forgery protections.
Private receipt photos
Receipt images are not placed in the public website directory.
Private storage and controlled viewing
Uploaded receipt photos are stored on EaseRecord’s private local storage disk. A customer must be authenticated, and the related record must belong to that customer, before the image can be viewed.
Image processing
Accepted JPG and PNG uploads are resized when needed, converted to an optimized JPG, and stripped of embedded metadata during processing.
Private response controls
Receipt responses are delivered with private, no-store cache instructions and content-type protection to reduce unintended browser or intermediary storage.
Removal and deletion
Customers can replace or remove a receipt photo. Permanently deleting its EaseRecord record also deletes the stored receipt file associated with that record.
Customer control
Update
Correct or replace record information when circumstances change.
Archive
Move inactive records out of the active dashboard without permanently deleting them.
Delete
Permanently remove an individual record and its associated receipt photo when it is no longer needed.
What EaseRecord does not claim
No online service can promise absolute security. EaseRecord does not claim to be end-to-end encrypted, zero-knowledge storage, a certified legal archive, an emergency backup system, or a replacement for the original documents maintained by customers or issuing organizations.
Customers should avoid storing passwords, complete payment-card numbers, Social Security numbers, government identification numbers, medical records, or other information that is not necessary for the organizational purpose of a record.
Customers also protect their accounts
- ✓ Use a unique password that is not reused on another service.
- ✓ Keep access to the registered email account secure.
- ✓ Sign out when using a shared or public computer.
- ✓ Add only information needed for personal organization.
- ✓ Report suspected unauthorized access promptly.