Your ledger, and who can reach it.

Your data is your own tenant

Every organisation's ledger is isolated. Queries are scoped to the organisation making them, so one client's data is not merely filtered out of another client's reports — it is not reachable by them. Where a business runs several entities, each entity is its own set of books, and consolidation reads across them only for the group the user belongs to.

Access is by role, and every posting is attributed

People are given roles rather than blanket access, and those roles decide what they can see and post. Every entry keeps who created it, when, and what it came from, and that record travels with the entry rather than living in a separate log that can drift from it.

Locked fiscal periods cannot be posted into by accident. That is a security property as much as an accounting one: it means last month cannot quietly change after it has been reported.

Pricing does not push you toward shared logins

Users are unlimited, and you are charged per entity. Per-seat pricing encourages teams to share one login, which makes the audit trail worthless. We would rather know who did what.

Getting your data out

Your data is exportable at any time, in full, including ledger detail rather than only summary reports. Reports export to PDF and spreadsheet, and the underlying entries export as data.

Questions we are happy to answer directly

If you need specifics for a due diligence questionnaire — where data is held, backup and retention arrangements, incident handling, or sub-processors — write to [email protected] and we will answer in writing. We would rather do that than post a page of claims you cannot verify.