One database per firm
Firms never share a database. A bookkeeper restricted to some clients can’t reach the others by any path, including their AI assistant.
Security and privacy
Your books, handled carefully.
What we do with the data, where it is kept, and where it goes when you use Claude or ChatGPT.
Where data is stored
In Canada. The app server and each firm’s live database are at OVHcloud’s data centre in Beauharnois, Québec. Encrypted backups are kept at OVHcloud in Beauharnois, Québec. App emails are sent through Resend, an email service based in the United States, so they may be processed outside Canada.
Encrypted backups
Each firm is backed up with its own key. Restores are tested automatically. Backups are kept 35 days.
Deletion that sticks
Deleting a firm destroys its key. Its backups become unreadable within 35 days.
No keys to handle
Intuit and payment keys are kept out of the code. Bookkeepers never see or handle developer keys. Intuit and Stripe keys are stored on the server in files only its administrator can read, and are given to the app as Docker secrets.
AI assistant connections
Connection tokens for Claude and ChatGPT are stored only as hashes. Access tokens last one hour and are rotated; a reused token revokes the connection.
Approvals first
One part of the system writes to QuickBooks, and only after a bookkeeper approves.
Claude · ChatGPT
What your AI assistant sees
When a bookkeeper uses their own Claude or ChatGPT, the data it reads is sent to that bookkeeper’s account, under their agreement with Anthropic or OpenAI. That data leaves Canada. Your books are stored in Canada; they are not confined to it once you choose to use an AI assistant.
Law 25
Québec’s Law 25
Your firm or business is the party responsible for the personal information in the books; we act as your service provider (processor). We support deletion on request and on cancellation, and documentation for your privacy impact assessment.
§
Read our privacy notice, terms of use and data processing agreement.