Security

You’re trusting us with the numbers your business runs on. Here’s how we protect them — and why the design itself keeps you in control.

Nothing posts unreviewed

Every write to your accounting system is staged and must be approved before it posts — the control layer is the whole product.
Budget guardrails (PO ceilings, billing ceilings, closed-project blocks) hold over-budget or invalid writes for a human decision.
Configure multi-step / dual-control approval chains, so two distinct people must sign off before money moves.
Every decision — approve, reject, override (with a reason), post — is written to an immutable audit trail with who and when.

Role-based access (Owner / Admin / Member) plus custom roles scoped to specific write types, amount limits, and dimensions.
Optional two-factor authentication (TOTP), with per-workspace enforcement so an admin can require it for the whole team.
Brute-force-protected sign-in (rate-limited, lockout after repeated failures) and cross-site request (CSRF) protection on every write.
Passwords are never stored — only a salted scrypt hash.

Credentials for your CRM and accounting system are transmitted over TLS and are only ever used to act on your own workspace.
Public-API keys are scoped to least privilege and stored only as a SHA-256 hash — the raw key is shown once and never persisted.
Outbound webhooks are signed (HMAC-SHA256, X-Webhook-Signature) so your endpoint can verify authenticity.

Export your entire workspace as JSON at any time (records, ledger, audit, settings — credentials excluded).
Download the full audit log as CSV for your compliance reviewers.
Tenant isolation: every record is partitioned by workspace, so one company can never see another’s data.
Account deletion on request.

Managed, automated backups.
Your CRM stays your source of truth — the sync is read-only on it unless you explicitly enable write-back, and a sandbox keeps connections read-only until you go live.

Have a security or compliance question for a rollout? Get in touch — we’re happy to walk your team through the controls.