How we handle audit files
At a glance
- Redacted files only: account IDs and numbers, no customer names or personal data.
- Shared through a private Google Drive folder that only your named people and TrueUpp can open. Never through our website form or as email attachments.
- Seen only by the person running your audit.
- Used only to produce your audit. Never shared, sold, or used to train any model.
- Deleted 30 days after delivery, or sooner if you ask, and we confirm the deletion in writing.
What we ask for
- 3–5 redacted contracts: the order form plus every addendum or amendment that covers commits, included usage, rollover, true-up and overage terms.
- A usage export for those accounts, monthly per account: account ID, metric, period start, period end and units.
- What was billed for each true-up period on those accounts.
- Optional: the spreadsheet you use today for true-ups.
What to remove before sending
- Replace customer names with an account ID, using the same ID in the contract and the usage file.
- Remove signatures, addresses, contact names and details, and anything unrelated to pricing.
- Keep dates, commit amounts, included units, rates, tiers, and the rollover, true-up and amendment clauses. Those are what we recalculate.
- Usage exports should contain account IDs and numbers only, never end-user data.
If something arrives unredacted, we delete it straight away, tell you, and ask for a redacted copy.
How files get to us
Once we've confirmed the audit is a fit, we create a private Google Drive folder for your company and share it only with the email addresses you give us. You upload the files there. Our website form doesn't accept files, and we ask you not to send files by email.
If your security team prefers another method, such as your own data room or file-sharing tool, we'll use that instead.
Who sees them and how they're used
Only the person running your audit opens your files. They're used for one purpose: to recalculate your true-ups and produce the audit schedule you receive. We work on them on an encrypted device, keep them out of any version control or shared systems, and don't pass them to contractors or anyone else, apart from the service providers described in our privacy policy.
We don't use your files, or anything derived from them, to train machine-learning models or to build marketing material. We'll never name your company or quote your figures without written permission.
What you get back
An audit schedule (a spreadsheet) showing recalculated and billed amounts for each true-up period, the tier-by-tier pricing with the contract clause behind each line, a month-by-month usage ledger, and the contract terms as we modeled them. It contains your account IDs and figures only.
Deletion
We delete your files from Google Drive and from our device 30 days after we deliver the audit, and confirm by email. If you'd like them deleted sooner, including before the audit is finished, email hello@trueupp.com and we'll do it within two business days. If you become a customer, we'll agree retention terms with you in writing.
Confidentiality
We treat everything you share as confidential. If you'd like a mutual NDA in place before sending files, send us yours; we're happy to sign a standard one.
Questions
Email hello@trueupp.com. For how we handle personal data more generally, see our privacy policy.