What “Sealed & Verified” means
When a receipt is stored, we record a cryptographic fingerprint of the file: a short code calculated from its exact contents, called a SHA-256 hash. Recalculating it later gives the same code only if the file is byte-for-byte identical. That is what a sealed record means.
Where you’ll see it
- In your vault list, a brass check beside the receipt title marks a sealed record.
- On the receipt itself, a Sealed & Verified panel sits under the filename, showing the start of the fingerprint.
There is nothing to turn on
Sealing happens automatically when a receipt is stored, whether you upload it, capture it on your phone, or forward it by email. It is not a setting, and it costs nothing extra on any plan.
What it does and does not tell you
- It does show that the stored file has not changed since we recorded its fingerprint.
- It does not judge whether the receipt itself is genuine, whether the purchase happened, or whether an expense qualifies for any tax treatment. It is a check on the file, not on the merchant.
The fingerprint also travels with your audit export, which is signed as a whole and can be checked on your own device.
If a receipt says “Not sealed”
A small number of older records were created before sealing existed. They are stored with the same encryption and retention protections as everything else; they simply have no fingerprint on file from the moment they were saved. Newly added receipts are sealed as they arrive.