Nuits Receipts
Every receipt and invoice, found in seconds.
A self-hosted receipt and invoice reader that runs on Cloudflare Workers. You deploy it into your own Cloudflare account. It:
- keeps every finance document in one place you can search: receipts, sales invoices, bank statements, other finance documents and the month packages you sent. Search covers the details it read and the words inside PDFs;
- reads vendor, amounts, VAT and dates from your receipts (PDF uploads, photos, or receipts you forward by email);
- suggests matches between receipts and bank transactions, and flags payments that have no receipt yet;
- imports bank statements (CSV, XLSX or PDF) in one step: choose the file and press Import. It finds the account and the columns, and asks only when it can't (import guide, limits);
- prepares a monthly CSV you can send to your accountant.
You review everything; nothing is filed or submitted for you. It helps you close the month before you hand things to your accountant, and find any document again afterwards. Keep originals as your local law requires. Nuits Receipts keeps a copy in your own Cloudflare R2 bucket.
Nuits Receipts organises receipts and prepares a CSV for your accountant. It is not tax, VAT or accounting advice, and it does not do your bookkeeping. Figures are AI-extracted and you should check them.
Documentation: https://receipts.nuits.net/docs/. Start with the tutorials, find a task in the how-to guides, look things up in the reference, or read how it works.
No warranty
No warranty. Not financial, tax or accounting advice.
Nuits Receipts is free, open-source software provided "as is", without warranties or conditions of any kind, as set out in the Apache License 2.0 (sections 7 and 8). It reads documents with an AI extraction model (Cloudflare Workers AI "Clairic", currently a preview model), and it can misread or miss vendors, amounts, VAT, dates and currencies. Bank matching is a suggestion, not a reconciliation you can rely on without checking.
You are responsible for checking every figure, for your own bookkeeping, tax and VAT filings, and for keeping your originals as your local law requires; Nuits Receipts keeps a copy in your own Cloudflare R2 bucket, and it is not a bookkeeping system. Ask your accountant or tax adviser about anything that matters.
You run it in your own Cloudflare account. Nuits does not receive, store or have access to your documents or data. You are responsible for your deployment, its security, its costs and the personal data in your receipts.
To the extent permitted by applicable law, Bapusaheb Shankaragouda Patil / Nuits is not liable for any loss arising from use of the software. Nothing in this notice limits liability that cannot be limited by law.
How it works
One Worker, server-rendered HTML, no cron jobs or queues:
- Originals go to a private R2 bucket; extracted rows go to D1.
- Extraction uses Cloudflare's Clairic model on Workers AI (
@cf/cloudflare/clairic). Cloudflare labels it a preview model, so its availability, behaviour and price may change. VAT arithmetic is checked in code, and uncertain rows are marked for review.
- Each cost gets a product and an expense type from your vendor rules, falling back to Cloudflare's Clef model (
@cf/cloudflare/clef).
- Bank rows from your CSV, XLSX or PDF statements are matched to receipts automatically, by exact amount, original currency, ECB estimate or a small tip, and obvious non-purchases (tax, bank fees, cash, own transfers) are marked for you. Foreign-currency receipts without a bank match get an ECB reference rate.
- Home is the archive of every finance document, with this month's close at the top. Search comes first. Below it, the month is a strip of three steps, Check, Match and Send: what still needs a check, which payments lack a receipt, and the month to send. Sending exports a CSV or a ZIP with every original and an index spreadsheet, and keeps a copy of what the accountant got. Optionally it uploads the same files to a OneDrive folder.
- Four places, the same on a computer and a phone: Home, Receipts, Bank and Settings. Receipts keeps To do: receipts missing a fact, overdue sales invoices and mail from new senders, open items first. Bank has a To do | All switch: payments with no receipt, or every payment. Every document to browse is on Home, and old Receipts All links open there.
Find any document
- Folders that build themselves. Home's drawer lists Everything, Starred, Recently opened, Saved searches, each year (as tabbed dividers) with its months, kinds, sellers, clients and tags. Each folder is a filter over your data, so nothing can be misfiled. Links such as
/?in=year:2026 or /?in=vendor:Hetzner open one directly.
- Search. Seller, client, invoice number, filename, sender, subject, amounts, dates, and the words inside PDFs. There is no OCR of photos and no extra AI cost. Try
42.50, >100, 100-200, march 2026, 2026-03, kind:sales, tag:travel or a quoted phrase.
- Quick find.
Cmd+K (Ctrl+K off a Mac) on any page opens a box with the first matches as you type.
- Read it in the app. A PDF viewer of our own, built on a self-hosted PDF.js: zoom, fit, rotate, thumbnails, find in the PDF and print. No third-party viewer is involved. On a computer, an opened document shows in a preview pane beside the list.
- Stars, tags and notes on every document, saved searches in the drawer, and Download folder for a ZIP of any folder or search (up to 900 files, with an index CSV).
- Overviews. A year, seller or client folder shows the total in EUR, the file count and 12 monthly bars.
- Other finance documents. On the Add page, Other documents keeps a contract, a letter or a tax decision, named after its file; its title and date can be changed on its page. These are never matched, packaged or counted in totals.
Files from before v2.0.0 are found by their details at once. To search the words inside them too, press Index older files in Settings, under Advanced, until none are left. Details: Find any document.
Deploy
With the button
- Click Deploy to Cloudflare above. Cloudflare copies this repository into your GitHub or GitLab account, lets you rename the Worker, the D1 database and the R2 bucket, and creates them in your account.
- When asked for
NUITS_PASSWORD, enter a password of at least 16 characters that you use nowhere else. Example values are refused.
- Adjust the Worker variables if you like (sign-in name, products, the label on the export link). They are described in the configuration reference.
- The build runs
bun run deploy, which applies the database schema to the DB binding and then deploys. Open the workers.dev URL and sign in as owner (or the name you set).
The button does not set up email. Uploads work without it; see Email to add it.
By hand
Requires Bun 1.4.2 or later (or Node 20+ for the scripts) and a Cloudflare account.
bun install --frozen-lockfile
bunx wrangler login
bun run setup # asks for names, senders and products, finds or creates D1, deploys, then asks for NUITS_PASSWORD
bun run setup writes your settings and resolved database ID to wrangler.production.jsonc, which is gitignored. Later deploys are bun run deploy. It refuses to reuse an existing database that holds other data, applies migrations before deploying, and stops if they fail. bun run deploy -- --dry-run checks and bundles without touching your account. Details: Deploy from the command line.
Email
Email is optional. It needs a domain on Cloudflare DNS with Email Routing and a Send to a Worker rule for your receipt address; only the senders you allow are read, and mail from anyone else waits in Receipts To do until you allow or ignore the sender. Follow Set up email, and see Forward a copy of incoming mail and Keep sales invoices for the optional extras.
Use it
Add receipts, clear Receipts To do, import a bank statement, settle Bank To do, then download the month for your accountant and mark it as sent. Your first month walks through it once with sample files; the how-to guides cover each step.
- A resolved row leaves the list. Approve, Discard, Not a purchase, Match and the bulk actions take the row away, the next open one moves up, and the banner offers Undo. An action that can't be undone, such as Move to invoices or Disconnect from OneDrive, asks first.
- Select many at once. Every list row has a tick box, and the bar above the list acts on the ticked rows, or on the whole list up to 500.
- Keyboard on a computer.
j and k move between rows, x ticks one, Enter opens it, a approves a receipt, u undoes, / searches, Cmd+K or Ctrl+K opens quick find, and ? lists them all. In the PDF viewer, + and - zoom, 0 fits, r rotates, n and p change page, and f finds.
Install it on your phone or computer
The app installs as its own window with its own icon, and needs no app store.
- iPhone or iPad (Safari): open the app, tap Share, then Add to Home Screen.
- Mac (Safari): File, then Add to Dock.
- Android or desktop Chrome and Edge: open the app, then use the menu's Install app (or Add to Home screen).
The installed app still needs a connection: offline it only shows a "You're offline" page, and it keeps nothing on the device. On Android, you can also share receipt PDFs and photos to the installed app from other apps. They open on the Add page, and nothing is uploaded until you choose what they are and press Add.
Marketing site
The project's home page and /privacy/ live in site/, a static Vite build with its own package.json and an assets-only site/wrangler.jsonc that also serves the demo video. You do not need it to run the app. To preview it: cd site && bun install && bun run build && bun run preview. The routes in site/wrangler.jsonc are the maintainer's domain, so change or remove them before deploying your own copy.
Documentation site
The documentation is in docs-site/, a Nimbus (Astro) project served at https://receipts.nuits.net/docs/. cd docs-site && bun install && bun run dev; writing rules are in docs-site/WRITING.md.
Privacy and outside calls
- The app runs in your own Cloudflare account. Nuits never sees your data. There is no telemetry, analytics, update check, licence server or sign-up.
- Cloudflare Workers AI receives each document's text or image and its email context (for Clairic), and vendor and line-item context (for Clef). This happens under your Cloudflare account and terms.
- Cloudflare Access (optional, see Protect the app with Cloudflare Access): in Access mode the Worker fetches your team's public signing keys from
https://<team>/cdn-cgi/access/certs. Nothing is sent.
- Frankfurter (
https://api.frankfurter.dev/v2/rates, ECB reference rates) receives a currency code and dates when a foreign-currency receipt needs a reference rate. No receipt content is sent.
- Microsoft Graph (optional, off unless configured, see Upload the month to OneDrive): only after you connect a Microsoft account in Settings, the Worker signs in at
login.microsoftonline.com and uploads the month's receipt files and index spreadsheet to the OneDrive folder you chose, through graph.microsoft.com. Nothing is sent before you connect, and Disconnect deletes the stored sign-in. The month ZIP download makes no outside calls.
- Logs: Workers observability is on at 100% sampling (
wrangler.jsonc). Logs stay in your Cloudflare account and contain request metadata and short reason codes, never receipt content. Lower head_sampling_rate if you prefer.
- No data residency or account confinement is promised beyond what your Cloudflare configuration provides.
- Receipts contain other people's personal data (sellers, staff names, partial card numbers, addresses). You are the controller of that data and decide how long to keep it.
Limits, costs and troubleshooting
- Limits: one user per deployment, file sizes and types, bank CSV formats, and the Cloudflare plan limits you may hit.
- Running costs: AI reading costs about 15 cents a month; plan on Workers Paid ($5 a month) if you upload PDFs. R2 needs a payment method on your Cloudflare account.
- Troubleshoot: including a first build that fails at the D1 migrations step.
Develop
bun install --frozen-lockfile
cp .dev.vars.example .dev.vars # set any NUITS_PASSWORD for local use
bun run migrate # local D1 only
bun run dev # http://localhost:8787, user "owner"
bun run dev uses wrangler.local.jsonc: local D1 and R2, no AI binding, AI_MODE=mock, synthetic example.com senders. It needs no Cloudflare sign-in.
bun run typecheck
bun run lint
bun run test # Worker tests in workerd; AI and FX mocked, network forbidden
bun run test:scripts # setup, deploy, schema and release tooling (bun test)
bun run smoke # with `bun run dev` running: auth, upload, import, matching, export, email
scripts/sample-receipts/ holds synthetic receipts and a synthetic bank CSV; none of it is real financial data. bun run samples regenerates them. Releases follow Conventional Commits: docs/RELEASING.md, CHANGELOG.md. Architecture: docs/ARCHITECTURE.md and How it works.
License and trademarks
Apache License 2.0; see LICENSE and NOTICE. The licence does not grant rights to the "Nuits" or "Nuits Receipts" names (section 6); forks should use their own name.
Holvi, Nordea, OP, Revolut, Wise, N26 and other bank names are trademarks of their respective owners. Nuits Receipts is not affiliated with or endorsed by any of them.
Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions. Nuits Receipts is an independent project and is not affiliated with or endorsed by Cloudflare.
