Built around private workspaces.

Access protection

Two-factor authentication, password hashing, session timeouts and workspace-specific access checks protect the application. Access is invitation-only during testing.

Private records

Receipts are stored outside the public website and encrypted. Customer and business details are encrypted in the database. Financial amounts and record identifiers remain available to the application for reporting.

Operations matter

HTTPS, server patches, monitored backups, antivirus scanning and controlled administrator access are required. No software can promise absolute security.