Built to be trusted with your most sensitive numbers.
Specific controls rather than reassuring language. Here is exactly what's in place, so you can judge it for yourself.
The controls, named.
Walled off by construction
Companies are isolated from each other with row-level security enforced at the database, not just in the app. Every login is locked to a single tier — a customer account can't reach platform admin, even if compromised. Roles are fixed by design (admin, editor, investor view, counsel): a permissions model you can't misconfigure won't leak.
Everything on the record
Every change is attributed and timestamped in an audit log you can see in your own settings. Partner and support access is scoped and audited like anyone else's, and read-only sessions let someone look without touching. Records archive instead of deleting, so an accidental delete can't break history.
Sharing you can take back
Everything shared externally goes out by personal link with a one-time code — valid 15 minutes, five attempts, then a temporary lock — so a forwarded link is useless. Every page is watermarked server-side with the viewer's name and email. Downloads are off by default, and revocation takes effect on the next document opened, mid-session if it has to.
Your files, your cloud
Documents live in your own Google Drive or OneDrive — your security policies, your backups, your permissions. We hold an encrypted connection, not your files.
Sign-in security
Multi-factor authentication with an authenticator app and backup codes. Sign in with email, Google, or Microsoft. Credentials encrypted at rest with key rotation, and sign-up abuse protection at the door.
AI and your data
AI is built in and does the busywork — and nothing changes without your approval. Every proposal is shown in full before you commit it, and every AI action lands in the same audit trail. Your data is used to answer your questions and do your work — not to train public models.
Your data is yours
Export your records. Delete your account, with safeguards against removing a company's last administrator. SOC 2 is on the roadmap — and we'll say "in progress," never "certified," until it's true.
Trust, by construction.
Start free and see every one of these controls working in your own account.
Try it free →