Security & data
Your financial data, handled with care.
You are handing us the most sensitive numbers your company has. Here is how we hold them, who can see them, and what happens on the day you leave.
- Your systems, your nameBooks live in your QuickBooks and your bank portals. We work inside your accounts as an invited user — we don’t hold your ledger hostage.
- Least-privilege accessOnly the accountant on your engagement, and their reviewer, hold access — at the lowest permission level the work requires.
- Encryption in transit and at restData moves over encrypted connections and is stored in encrypted, access-controlled systems.
- Multi-factor everywhereMFA is required on every tool that touches your data, for every person on our side.
- No data resale, everWe never sell, share or monetise your data. It is used only to do your books.
- Clean offboardingPart ways and access is revoked; the books remain wholly yours, in systems already in your name. Nothing to claw back.
Confidentiality is the engagement
Every engagement is covered by a written confidentiality agreement before we touch a transaction. Document sharing runs through access-controlled systems — not email attachments — and we’ll match your own security requirements where you have them.
If your investors or an acquirer need a security questionnaire completed as part of diligence, that’s a normal request and we’ll work through it with you.
Editor’s note — remove before launch Confirm the specifics before this page goes live: name your actual cloud/storage providers and their regions, state your MFA and password-manager policy, and only claim a formal certification (e.g. SOC 2) once you genuinely hold it. The commitments above are written to be true of a careful practice; make sure each matches how APA actually operates.
Security questions before you sign?
Security & data
Your financial data, handled with care.
You are handing us the most sensitive numbers your company has. Here is how we hold them, who can see them, and what happens on the day you leave.
- Your systems, your nameBooks live in your QuickBooks and your bank portals. We work inside your accounts as an invited user — we don’t hold your ledger hostage.
- Least-privilege accessOnly the accountant on your engagement, and their reviewer, hold access — at the lowest permission level the work requires.
- Encryption in transit and at restData moves over encrypted connections and is stored in encrypted, access-controlled systems.
- Multi-factor everywhereMFA is required on every tool that touches your data, for every person on our side.
- No data resale, everWe never sell, share or monetise your data. It is used only to do your books.
- Clean offboardingPart ways and access is revoked; the books remain wholly yours, in systems already in your name. Nothing to claw back.
Confidentiality is the engagement
Every engagement is covered by a written confidentiality agreement before we touch a transaction. Document sharing runs through access-controlled systems — not email attachments — and we’ll match your own security requirements where you have them.
If your investors or an acquirer need a security questionnaire completed as part of diligence, that’s a normal request and we’ll work through it with you.
Editor’s note — remove before launch Confirm the specifics before this page goes live: name your actual cloud/storage providers and their regions, state your MFA and password-manager policy, and only claim a formal certification (e.g. SOC 2) once you genuinely hold it. The commitments above are written to be true of a careful practice; make sure each matches how APA actually operates.