Security at AccuFirm

Connections to AccuFirm use encryption in transit. Account access is protected through managed authentication, and sensitive account actions require an authenticated session.

Workspace and business access rules are enforced in the data layer and in protected server operations. Financial requests verify the signed-in user, workspace membership, selected context, and applicable business before returning or changing private information.

Financial institution connections are handled through Plaid. AccuFirm does not ask you to type banking credentials into AccuFirm. QuickBooks Online integration is bounded to read-only business insights within the product; AccuFirm does not post accounting entries back to QuickBooks Online.

Private service credentials are kept on protected server-side systems and are not embedded in browser code. Provider access is limited to the operations needed for the connected feature.

AccuFirm uses error monitoring, controlled data validation, backups and infrastructure safeguards provided by its hosting services, and testing intended to identify regressions. We review incidents and improve controls as the product evolves.

Use a unique password, protect your email account and devices, sign out on shared devices, and contact us promptly if you suspect unauthorized access.

To report a potential security issue, email info@accufirm.co with the subject “Security report.” Please include enough detail to reproduce the issue and avoid accessing, changing, or sharing other people's data. We do not claim certifications such as SOC 2, ISO 27001, or PCI compliance unless explicitly confirmed in a future update.