Your books deserve bank-grade care.
Your books are the highest-trust data in your company. We treat them that way.
SOC 2 (in progress)
Type I report planned for end of 2026. Controls already operational under our internal SOC 2-track program.
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest. All backups encrypted with separate key material.
Tenant isolation
Every read and write is forced through a row-level tenant scope. No cross-org data access is possible from application code.
Audit log
Every mutation writes an immutable audit row including actor, before/after snapshot, and IP. Available to admins via Settings.
Read-only bank access
Bank connections via Plaid are read-only. We don't have ACH origination credentials and can't move money.
Daily backups
Postgres backups every 24 hours, retained for 30 days. Point-in-time recovery available within the last 7 days.
Sub-processors
AWS / Cloudflare (infrastructure), Stripe (payments), Plaid (bank data), Anthropic (AI), Resend (email). Updated list at /terms.
Bug bounty
Report security issues to security@financeoperatingsystem.com — we respond within 1 business day.