Security
How your financial data is handled
Handing over your books means handing over access. These are the controls that sit around it, written plainly rather than as a compliance badge.
Security practices
- Encryption in transit and at rest
- Documents and credentials move over TLS and are stored encrypted. Financial records stay in the cloud accounting platforms you already control.
- Least-privilege access
- Each team member gets only the access their role needs, granted per client. No shared logins, no blanket admin rights.
- Multi-factor authentication
- MFA is mandatory on every system that touches client data, including accounting software, email and document storage.
- Access reviews and offboarding
- Permissions are reviewed quarterly and revoked the day someone leaves an engagement or the firm.
- No data on personal devices
- Client data is worked on in managed environments. It is not copied to personal machines or personal cloud accounts.
- Confidentiality agreements
- Everyone who touches your account is under a signed confidentiality agreement. We will sign yours during onboarding.
- Audit trail
- Actions in your accounting platform are attributable to a named user, so there is always a record of who changed what and when.
- Backup and continuity
- Working papers are backed up daily with versioning, and the account manager role has a documented handover so cover is never a single point of failure.
Your side
What we ask of you
- Grant access at the permission level we agree, not administrator by default.
- Keep MFA switched on for every user in your accounting platform.
- Tell us when someone leaves your team so we can review shared access.
- Send documents through the shared workspace rather than email attachments.
Questions about a specific control, or need us to complete your vendor security questionnaire? Email us and we will answer it properly.
Due diligence
Bring your security questionnaire
We would rather answer it before an engagement than during one. Send it over and we will complete it.
Thirty minutes · No obligation · Free financial health review