verified_user Security & trust

Your books, isolated, encrypted and auditable

Per-tenant data isolation, server-side authorisation on every action, encryption in transit and at rest, and a change history you can inspect.

Per tenant
Data isolation
2FA
Available to all users
Full
Audit trail
rocket_launch Start free trial payments View pricing
Overview What you get FAQ Related
verified_user Overview

What we are asked most

The questions that come up in every security review.

  • check_circleHow is one customer's data kept away from another's
  • check_circleIs access checked on the server or only hidden in the interface
  • check_circleWhat happens if someone deletes something they should not have
  • check_circleHow are backups handled, and can we get our data out
Start free trial Talk to us east
Security & trust
shield

Isolation and access

Every record is scoped to a tenant at the data layer, and every request is authorised against the user's permissions.

  • check_circleTenant scoping enforced in the data layer
  • check_circleServer-side authorisation on every action
  • check_circleRole-based access control with custom roles
  • check_circleWarehouse and branch scoping
lock

Protecting credentials and data

Encryption in transit and at rest, two-factor authentication, and controlled sessions.

  • check_circleTLS in transit, encryption at rest
  • check_circleTwo-factor authentication
  • check_circleSession timeout controls
  • check_circleInvitation-based onboarding with single-use tokens
history

Recoverable and accountable

Automated backups, an immutable ledger and a complete activity log.

  • check_circleAutomated backups
  • check_circleReversal-based corrections, never silent edits
  • check_circlePeriod locking after close
  • check_circleActivity log with user and timestamp
help_outline FAQ

Questions, answered

Can a user see another tenant's data?
No. Tenant scoping is applied at the data layer, not by filtering in the interface.
Do you support two-factor authentication?
Yes, for all users.
Can we export our data?
Yes. Reports and master data export to CSV, Excel and PDF, and the REST API exposes the same data.
Who can unlock a closed period?
Only a user with the override permission, and the action is logged.

Need to complete a security review?

Send us your questionnaire through the contact page and we will work through it with you.

rocket_launch Start free trial payments View pricing

Free 14-day trial • No credit card • Cancel anytime