Encrypted in transit and at rest
All traffic runs over TLS and your data sits in an encrypted managed Postgres database.
Security
Permissions that only exist in the interface are decoration. Ours are enforced where the data lives, so every request is checked.
All traffic runs over TLS and your data sits in an encrypted managed Postgres database.
Access rules live in the database, not just the screen. A query for someone else's books returns nothing.
Owner, admin, accountant and viewer roles decide who can post, who can approve and who can only read.
Uploaded receipts live in a private bucket, reachable only through short-lived signed links.
Every create, update and delete on a financial document is recorded with the user and timestamp.
Public invoice links expose a single invoice through a random token and nothing else.
Start with a ready-made chart of accounts, invite your accountant, and close your year without the scramble.