Security
How we look after your financial records
This page describes what is in place today. We hold no security certifications at present and will not imply otherwise.
Signing in
- Passwords are stored as bcrypt hashes, never as plain text.
- Passwords must have at least 8 characters, with upper and lower case letters, a number and a special character.
- You can sign in with Google or Microsoft instead of a password.
- New accounts confirm their email address, and repeated failed sign-ins are rate limited.
- Password reset links expire after one hour and stop working once the password changes.
Access to your books
- Each login sees only the vouchers, ledgers and reports created under that login.
- The owner can add people with their own login and an admin or agent role.
- Owners and admins can block a login from signing in.
Protecting your records
- Change history shows how a voucher or ledger has been edited.
- A books lock date stops entries in a closed period from being added, changed or deleted.
- Cancelled vouchers stay on record, clearly marked as cancelled.
Your documents and data
- Uploaded documents are stored in Amazon Web Services' Mumbai region and opened through links that expire.
- The website and app use HTTPS.
- Files you send to an AI feature are processed by Google. Other services we rely on are listed in our privacy policy.
- We do not sell your data.
Found a security problem?
Please email support@fintog.com with the details and how to reproduce it, and give us a chance to fix it before sharing it publicly. For how personal data is handled, read our privacy policy.
Bring your books, GST and compliance together.
Create your account, set up your company and record your first voucher. No card is needed to sign up.