Security
Keeping the firm's data safe
An accounting firm holds tax data, payroll data and access credentials for every client. We handle that data with the care it requires.
Encrypted traffic
All traffic uses TLS, with HSTS preventing unencrypted connections.
Encrypted credentials
Credentials stored on the platform are encrypted with AES-256-GCM.
Logged reveals
Whenever someone reveals a credential, the platform records who, when and which one.
Daily backups, tested restores
Backups run every day and restores are tested. A backup that has never been restored is not a guarantee.
Vulnerability scanning
The platform is scanned for vulnerabilities twice a day.
Demo separate from production
The demo environment is separate from production and holds no real client data.
GDPR
Personal data is processed in line with the General Data Protection Regulation.
Standards-aligned management
Quality and information security management are aligned with ISO 9001 and ISO/IEC 27001.
Security is also knowing who decides
Nothing is submitted to the authorities without the approval of a chartered accountant. Technology proposes; a person always decides.
Found a vulnerability? See how to report it at /.well-known/security.txt.