Your accounts, your control.
Security starts with how access works. You invite us from your own accounts, at the access level each job needs: read-only for banks, cards and marketplaces, and a standard user seat in your accounting software. You stay in control and can remove our access at any time.
Access by invitation · no passwords shared · MFA on every account
Access map
- Bank & cardsBusiness accounts and cards Read-only MFA ✓
- MarketplacesAmazon · Shopify · eBay Read-only MFA ✓
- QuickBooks Online / XeroYour company file Standard user (to post entries) MFA ✓
- Payroll providerYour own provider Prepares runs MFA ✓
Your controls
- Invited from your account ✓
- No passwords shared ✓
- Payroll runs on your approval ✓
- Remove access any time ✓
Invited by you, at the level each job needs.
You send each invitation from your own accounts, and you approve each one. We never ask for passwords: even our free books review form has no password field.
Banks and cards
Read-onlyWe see transactions to reconcile them. Read-only access cannot move money.
Marketplaces
Read-onlyOrders, payouts, fees and refunds, so every payout is matched to its sales.
QuickBooks Online or Xero
Standard userMonthly bookkeeping means posting entries in your file, so we take a standard user seat there.
Payroll
Prepares runsWe prepare each pay run in your own provider; you approve and submit every run.
We never hold or move client funds.
Controls built into the work.
You can remove our access at any time.
Every connection lives in your own accounts, so you can remove it yourself, whenever you choose. When an engagement ends, we remove ourselves from each one.
- Access granted by your invitation
- Removable from your own accounts
- Payroll approved by you on every run
- We remove ourselves when an engagement ends
How long we keep what you send.
Free books review requests
90 DAYSKept for 90 days, then deleted automatically.
Client records
ENGAGEMENT LETTERKept as set out in your engagement letter: [[FILL: client record retention]]
More detail is in our privacy policy.
Reporting a security concern
Spotted something that looks wrong? Email us and we'll look into it: [[FILL: security contact email]]
Questions about access and security
What access do you need?
Read-only access to your banks, cards and marketplaces, and a standard user seat in your QuickBooks Online or Xero file, because monthly bookkeeping means posting entries there. Payroll runs in your own provider, with your approval on every run.
Do you use multi-factor authentication?
Yes. MFA is on every account we use, and access is need-to-know: only the people working on your books.
Can I remove your access?
Yes, at any time, from your own accounts. Each connection is an invitation you sent, so you can remove it yourself whenever you choose.
Where does my financial data live?
In your own accounts: your bank, your marketplaces, your QuickBooks Online or Xero file and your payroll provider. We work inside them through the access you grant, and we never hold or move client funds.
What happens when an engagement ends?
We remove ourselves from each of your accounts. Client records are kept as set out in your engagement letter.
See where your books stand — free.
Get a written review of every channel: what's reconciled, what's missing, and the exact price to fix it. No card, no commitment.
Get my free books review