Skip to content

Security & privacy

Built for the most sensitive files your clients have.

Bank statements, payroll and tax records deserve more than a padlock icon. Here's exactly how we protect them.

Consultant in a yellow blazer holding a tablet

Overview

Encrypted in transit and at rest

TLS for every connection. Documents and databases encrypted at rest; account numbers and MFA secrets encrypted again at the field level with AES-256-GCM.

Tenant isolation

Every query is scoped to one business. Access is checked on every request against your role in that business.

Multi-factor authentication

Authenticator-app MFA with recovery codes, account lockout after repeated failures, and a sessions list you can revoke.

Complete audit log

Creates, edits, voids, sends and approvals are recorded with who, when, and the before and after values.

Canadian data residency

Choose to keep documents and data in a Canadian region.

Deletion on request

Delete a client, a document or your whole account. We remove it from active systems and backups on a published schedule.

AI without training on your data

Documents are processed by our AI provider under terms that prohibit using them to train models. Code — not AI — does the arithmetic.

Responsible disclosure

Found a vulnerability? Tell us and we'll work with you to fix it quickly.

In detail

How it works under the hood

Encryption

Your documents and books are protected wherever they are.

  • TLS for all traffic between your browser, our servers and our providers, with HSTS in production
  • Uploaded documents and databases encrypted at rest by the storage provider
  • Bank account numbers and MFA secrets additionally encrypted at the field level with AES-256-GCM
  • Passwords hashed with Argon2id — we never store or see your password

Tenant isolation and access control

Each business is its own tenant. Nobody sees a business they haven't been invited to.

  • Every database query is scoped to a single business
  • Each request checks your membership and role in that business
  • Roles: owner, admin, accountant, bookkeeper, viewer and upload-only
  • Upload-only links let clients send documents without seeing the books

Account protection

Strong defaults for signing in.

  • Authenticator-app multi-factor authentication with one-time recovery codes
  • Account lockout after repeated failed sign-ins
  • Sessions you can see and revoke; changing your password signs out other sessions
  • Signed, http-only session cookies and origin checks on every change

Audit log

Accounting needs a trail. Every change is recorded.

  • Creates, edits, deletes, voids, sends and approvals
  • Who did it, when, and the before and after values
  • Posted journal entries are never edited — corrections are reversals you can see

AI processing

AI helps read and classify documents. It never decides the numbers on its own.

  • Documents are processed by our AI inference provider, Groq, under terms that prohibit training on customer data
  • Only the content needed to read or classify a document is sent, over an encrypted connection
  • AI-extracted totals are always confirmed by arithmetic against the statement before use
  • Suggestions show their reason and confidence; low-confidence ones need a person's approval

Data residency, retention and deletion

You decide where your data lives and when it goes.

  • Option to keep documents and data in a Canadian region
  • Export your books and documents at any time
  • Delete a document, a client business or your whole account on request
  • Deleted data is removed from active systems promptly and from backups on a published schedule

More about how we handle personal information is in our privacy policy.

Responsible disclosure

Found a vulnerability? Tell us.

We welcome reports from security researchers and will work with you to understand and fix the issue quickly.

How to report

Use our contact page and choose “Something else”, with a description of the issue, the steps to reproduce it, and its potential impact. Please don't include exploit details until we've replied with a private channel.

Please do

  • Use test accounts and your own data
  • Give us reasonable time to fix before disclosure
  • Stop and report if you reach someone else's data

Please don't

  • Access, change or delete other users' data
  • Run denial-of-service or volume testing
  • Use social engineering or physical attacks

We won't pursue legal action against good-faith research that follows these guidelines.

Spend December on your business — not your books.

Every feature is free. Set up in minutes, invite your bookkeeper, and upload last year's statements whenever you're ready.

See how it works
  • No credit card
  • Encrypted
  • Never used to train AI models