Thanks for the great feedback! Comments inline:
Sara M. Laidlaw wrote:
> You have been working!
> I had a little time Saturday and doodled some things to ask about.
> It looks like you fixed the missing Scroll bar when you select the
> categories.
> And the Comment field is wider so you can see the whole thing.
Great.
> I loaded FireFox so I can see. IE is unreadable.
Yep, today is IE day; we're working on a host of IE-related bugs right now.
> I wish that the list was editable as a spreadsheet and just code the
> expenses right on the list.
> With drop downs for the categories, or being able to tab across the row
> instead of it opening a new window each time.
Good idea. We've discussed inline table editing as an option in the
future, but first we're going to iron out the kinks with the current
dialog-based approach.
> On the Add Expense screen....
> After you select the category and class code, and close, the check mark is
> un-clicked. (?)
> I coded a few before I noticed and then had to redecide what I wanted to
> submit to the report.
Ahh, good point. The table is refreshed when you come back from the
"Edit expense" dialog, which causes it to lose the checkmark. We'll
take a look at how to preserve the checkmarks.
> The second tag is not listed in a column like the category is.
> I'd like to look at the list and review it before sending it to the report.
> I can't see the classes that I selected.
I don't quite understand this one: the "second tag"? We currently only
allow a single tag per expense. As for seeing the tag, it should appear
in square brackets ("[tag]") in front of the merchant name. Is it not
appearing for you? Alternatively, you can switch to "Detailed" layout
and it should be visible in a separate column.
Finally, we've considered adding a third "List" layout to the report
that just shows everything in one big table (similar to the expenses
dialog). Would this help?
I apologize for not quite understanding your comment.
> Is there a way to print the report before submitting it?
Aha, there's an "Export to PDF" option, but I realize now it was
accidentally removed from the pre-submit state. I'll make sure that
gets back in.
> Security:
> My husband is an IT Director for a large CPA firm. He is a security nut.
> He is really bothered about the program storing the credit card passwords so
> you can obtain the information automatically.
> Even Intuit requires us to enter a password each time we decide to download
> the activity.
I can completely understand the concern. This is without question the
most sensitive data we store, and is the primary justification for the
extraordinary security process we have in place. I imagine your husband
is familiar with the PCI-DSS (payment card industry data security
standard)? A core requirement of this is something called a "split
knowledge, dual control" encryption key. This key is stored in a "split
knowledge" way such that no individual knows the whole thing, and
requires "dual control" to activate -- very similar to the "turn two
simultaneous keys" technique used by nuclear launch silos. The result
is nobody can decrypt this information individually, not even me.
To clarify, however, Intuit does store this same information with
Mint.com (recently acquired by Intuit), as do others. It's crucially
sensitive information, yes, but this is precisely the type of
information Visa and MasterCard had in mind when they developed the PCI
security standard, and exactly why we adhere to it.
> He refuses to sign up and help me test Expensify. I was deeply disturbed
> that I received my personal credit card detail in an email, which may or may
> not be that secure, nor do I want my personal credit card activity coming to
> my office. A notice that something is available should be enough. He said
> that it is enough to worry about the credit card servers being hacked
> without also worrying about 3rd party apps. Can we op out of having you
> store this?
As for the monthly "here's your latest expenses" email, we hadn't had
any complaints about it for the 8 months we've been operational, but at
your suggestion we've already removed it. (And as an aside, it never
showed any billing information, and you always had the option of
unsubscribing from it in your Settings page.)
As for opting out, the online credit card import has always been a
purely optional convenience. You can upload your bank transactions
manually using the "Other / Upload" option, which means we never see
your username or password.
Does this make sense and help address your concern?
Thanks for all the great questions, please keep them coming!
-david