Trust & security
Your financial data, under your control.
You hand us bank, billing and payroll data. Here is how we connect to it, where it lives and who can act on it. Every point below describes how our systems work today.
Access
- Connected through each provider's own sign-in: Banks, cards, billing, payroll and accounting software connect through the provider's own authorization screen. You approve the access there and can revoke it there at any time.
- We never ask for your passwords: Our automation never types into a sign-in or password field and never signs you out of an account. Your credentials stay with you.
- Two-factor sign-in: Two-factor authentication is available on every client portal login.
Data
- Encrypted in transit: Every page, connection and file transfer runs over HTTPS.
- Separated by account: Each client's data sits under its own login, and the database enforces row-level security so one account can't read another's.
- Private document storage: Files you upload go to private storage, never a public link. When a file is shared, it's through a signed link that expires.
Control
- Nothing filed or paid without your sign-off: Our automation stops before any submit, file or pay step. Returns, filings and payments go out only after you approve them.
- An audit trail on every action: Every automated action is logged with what was done and when, alongside your accounting software's own audit log.
- Card payments on Stripe: Payments run on Stripe's hosted checkout. Card numbers go to Stripe and never touch our systems.
Security review from your investors or customers?
Bring the questionnaire to your scope call and we will walk through it with you.