Security

What SyncBooks does to keep your books and your customers' data safe, in plain terms.

Signing in

Two-step verification. A code from an authenticator app after your password, with ten single-use recovery codes. You get an email when it changes. A workspace can require it of every member.
Strong passwords. Passwords must meet strength rules and are checked against a blocklist. An old password that no longer qualifies must be changed at the next sign-in.
Bot checks on sign-in, sign-up and password reset.
Password reset links work once and expire after an hour.
Signed-in devices. See every active session and sign any of them out.
Single sign-on on the Enterprise plan.

Roles and permissions. Roles are built from view and edit permissions for each area. Each member sees only the companies you give them.
Collaborators such as your accountant get only the role and companies you choose.
Approvals. Purchase orders and bills above an amount can require someone's approval before they are sent, posted or paid.
Audit log. Who posted or changed what, and when.

Supplier tax IDs are stored encrypted and only ever shown masked.
Employees' social security numbers and bank accounts are stored encrypted, shown as the last four digits, and every look is recorded.
Suppliers' bank details are sealed.
Card payments go through Stripe, to your own Stripe account.

API keys are limited to the companies you choose and to what the person who made them may do. Each is shown once, can be revoked and expires.
Webhooks are signed, so your software can tell they came from SyncBooks.
Customer and supplier portals use emailed sign-in links, so your customers and suppliers have no password to lose.

Verified backups. Backups are made and restoring them is tested.
Export everything. The workspace owner can download everything the workspace holds as one file.
Deletion on request. Ask for a login or a whole workspace to be deleted.
If you stop paying, your workspace goes read-only. Nothing is deleted.