Control & confidence
Control belongs in the workflow.
Understand the intended controls, your responsibilities and the questions to ask before production.
Designed-in controls
Design requirements—not a certification claim.
-
Workspace boundaries
Permissions and membership scope govern reads, files, searches, exports and agent actions.
-
Review consequential actions
A changed amount, recipient or record version requires a refreshed preview and the required approval.
-
Separate public and private
Marketing and public search never need private expense records or conversations.
-
Keep a useful audit trail
Creations, changes, decisions and access changes are recorded so you can see who did what and when.
-
Treat documents as data
An uploaded document is evidence to read, not instructions to follow.
-
Provider choices are explicit
Third-party providers are chosen deliberately and shown, with their own scope and consent.
Protecting your records.
Intended product controls in practice.
-
Roles & permissions
Roles decide who can view, submit, approve and administer.
-
Two-step verification
Add a second step to sign-in for the accounts that need it.
-
Session management
Removing a member or access ends their future access and live sessions.
-
Original evidence retained
The source document stays with the record it supports.
-
Data export
Export your records in common formats.
-
Admin console boundaries
Support staff do not routinely see customer financial content. Any temporary access needs a purpose and is recorded.
Your responsibilities.
Good controls work best with good habits.
-
Invite deliberately
Give people the role and scope they need, and no more.
-
Review access
Remove members and accountants when they no longer need access.
-
Keep sign-in safe
Use two-step verification and keep your credentials private.
Questions before production.
Are you certified?
This page describes design requirements and intended controls. It makes no certification claim. If you need specific assurances, ask us and we will answer honestly.
Who can see my financial records?
People in your workspace within their role and scope. The admin console does not routinely show customer financial content.
Is my data kept after I leave?
Retention and deletion follow the Privacy Policy and your plan. Read the policy for the details.
Have a security question?
Ask before you decide. We will tell you what is and is not in place.