Company and role boundaries
Company-scoped access is enforced in the database. Staff permissions and branch limits restrict access; portal users access only their own matched records.
Financial integrity
Balanced journals, idempotent postings and closed-period protections underpin the accounts. Posted journals are reversed rather than deleted.
Personal data and access
Sign-in, device/session controls, change history, consent records and controlled exports support responsible operation. No certification or independently verified service-level guarantee is claimed.
Report a concern
Send a security concern using Contact. Do not include passwords, access tokens or other secrets.