Security
Claims we can prove
Every statement on this page corresponds to a rule enforced in the database or the server — not a setting someone remembered to turn on.
Architecture
- Tenant isolation is row-level security in PostgreSQL; the application role cannot read another tenant's rows.
- Every posting document produces exactly one balanced journal entry — a deferred database trigger is the last line of defence.
- Closed periods are a trigger-enforced status; reopening writes its own audit row and no session variable bypasses it.
- Agents can never delete a document or edit a posted one, at any amount — refused when their token is issued and again at every endpoint.
- Money is integer cents end to end; there is no floating-point arithmetic in the ledger.
- Webhooks from payment and bank providers are signature-verified and processed idempotently; replayed or reordered deliveries cannot double-post.
- Tax identifiers and bank tokens are stored as authenticated encryption envelopes; they never leave the database through an unaudited path.
- Your books are exportable in full at any time as documented JSONL and CSV — and that access survives any billing state.
SOC 2
Our SOC 2 report is available to customers and prospects under NDA — email [email protected] to request it.
Subprocessors
| Provider | Purpose | Data |
|---|---|---|
| Railway | Application hosting | All application data (encrypted at rest) |
| PostgreSQL (managed) | Database | All application data |
| Cloudflare | Object storage (R2), this site | Uploaded documents, exports, backups |
| Stripe | Payments, bank feeds, billing | Payment and bank-feed data; billing details |
| SendGrid | Email sending and inbound mail | Email addresses and message contents |
| Anthropic / OpenRouter | Model inference for the agents | Document text and ledger context sent for a task |
| Sentry | Error monitoring | Error traces (no document contents) |
Responsible disclosure
Found a vulnerability? Email [email protected]. We acknowledge within two business days, keep you informed, and credit you if you wish. Please do not access data that is not yours and do not run denial-of-service tests.