Books are private. We build like it.

Documents, books, and client records are stored and processed in Google Cloud's Montréal region. Residency isn't a checkbox for us — it's where the infrastructure physically is.

TLS in transit, encryption at rest, and dedicated encryption keys per credential type — a QuickBooks token is never protected by the same key as anything else.

Two-factor authentication is required on every password sign-in; accounts using Google single sign-on are authenticated through Google's own security controls. Role-based access keeps team members inside their lane, and client data scoped to the clients they serve.

Document classification runs on enterprise AI APIs that do not train on your data. Identical documents are processed once and cached — your content isn't re-sent around the internet for fun.

Nothing posts to a client's books without explicit approval from your team. Every posted entry keeps a link to its source document — a real audit trail, not a black box.

Built to operate under PIPEDA and Québec's Law 25. Transactional email (verification, password resets, notifications) is delivered through a specialized email provider under a data-processing agreement; your documents and books themselves never leave the Montréal region.