Every business is its own tenant.
A business's books are scoped at the database layer, not just at the page. Every query that touches a business's data carries that business's scope, and a query without one is refused rather than allowed to return everything. A user sees the businesses they were invited to and nothing across.
What is encrypted
- Bank statements. Sealed on arrival with a key kept apart from the disk that holds them. Only the bookkeeping engine opens them.
- Bank connection tokens. Held in a vault, never in a page, never in a log.
- Taxpayer numbers from W-9s. Encrypted the moment they arrive; only the last four digits are ever displayed again.
- Everything in transit. HTTPS only.
Signing in
No passwords to leak. Sign-in is by passkey or by a one-time code sent to the address that was invited; nobody can create an account for themselves. An idle session is signed out after fifteen minutes, with a warning five minutes before, so a screen left open in an office does not stay open.
Backups
The whole system is backed up every night: every table and every uploaded file, encrypted before it leaves the server, stored in US object storage. Each backup is restored into a scratch database and counted before it is accepted, so a backup that would not restore is noticed the night it is taken, not the day it is needed. Ninety nightly copies and a year of monthly ones are kept.
Who did what
Every adjustment to the books says who made it and when. Every time a W-9 link is opened or a form is signed is recorded. A client's answer to a question is kept with the question. The books can always say how they came to be the way they are.
What we do not claim
We do not hold a SOC 2 or ISO 27001 certification today, and we will not say otherwise on this page. We do not file returns, we do not move money, and we do not sell or share anybody's data. If your firm needs a written information security plan or a vendor questionnaire answered, ask us; we will answer it in writing.