How we protect your financial data

Your records are among the most sensitive information you have. The portal is built around that.

• Encrypted in transit. All traffic uses HTTPS with HSTS; insecure connections are refused.
• Encrypted at rest. Documents and QuickBooks access tokens are encrypted with AES-256-GCM.
• Strong password storage. Passwords are hashed with Argon2id and never stored in readable form.
• Strict separation. Each client sees only their own company. Staff see only the clients assigned to them.
• Full audit trail. Sign-ins, changes, downloads and report views are recorded and can't be altered.
• Automatic sign-out. Idle sessions end after 15 minutes; repeated failed sign-ins lock the account.
• QuickBooks via Intuit OAuth. You approve access on Intuit's own site; we never see your QuickBooks password, and you can revoke access at any time.