Your books belong to you. We just keep them locked down.
Each company runs in its own isolated tenant with encrypted storage, daily backups and role-based access. You can export everything you own, at any time, in a format you can read.
What is actually in place.
Encryption
AES-256 at rest and TLS 1.3 in transit, with encrypted document storage and encrypted backups.
Role-based access
Twelve role templates, editable per company, down to the module and the action.
Tamper-evident audit log
Who changed what and when, keeping the previous value. Log entries cannot be edited or deleted.
Backups & recovery
Daily backups with point-in-time restore, tested on a schedule rather than assumed.
Isolated tenants
Your company data sits in its own tenant, not in a shared table with other businesses.
2FA & SSO
Two-factor for every user; SAML SSO and session policy enforcement on group plans.
How we work behind the product.
Few people, logged access, reviewed changes
Support access to a customer tenant is time-boxed, requested per incident and recorded. Code changes are reviewed and released on a schedule you can ask about.
- Least privilege — no standing production access for the team.
- Support access is logged and visible to you on request.
- Reviewed releases with rollback, not hot edits on live data.
- Incident practice — a bug that blocks a filing is treated as live.
Said plainly, without badge theatre.
We will tell you exactly where we stand rather than imply a certification we do not hold. Ask for the security note and you get the current position in writing.
Your data, on exit
Full export of masters, documents, ledgers and attachments whenever you ask — no fee, no notice period.
Sub-processors
The list of infrastructure and service providers we use, and what each one touches, is available on request.
Reporting an issue
Security reports reach the product team directly and get an answer the same working day.
Want the security note before you decide?
Ask and we will send the current document, including sub-processors and the DPA.