Safe as houses
Your books are locked up tight.
Bookkeeping means trusting someone with your bank lines, your payroll and your clients' numbers. Here's exactly how we look after them, in plain English, with no “bank-grade” hand-waving.
Every business in its own sealed room
- Each set of books is walled off by the database itself, not just by the app's good behaviour.
- Every request carries who's asking, and the database checks they may open that business, row by row. Get it wrong and you get nothing, never someone else's books.
- Practices reach the businesses in their own practice, and only those. Being a big account gives no reach into anyone else's books.
- Viewers read. They never write.
Bank connections that can look, never touch
- Direct feeds and Open Banking are read-only. Nothing in Sumsational can move money.
- We never see or store your banking password.
- Feed keys and tokens are sealed with AES-256-GCM, bound to your business, and never sent to a browser, a log, an API key holder or an AI.
- Disconnect a bank and its access is withdrawn there and then.
A ledger that can't be fudged
- The database refuses unbalanced journals, and anything dated inside a locked period.
- Posted journals are never edited or deleted. Corrections are reversals, so the history stays complete.
- Issued invoices are frozen, and their numbers come from a locked counter: no gaps, no reuse.
- A full audit trail records who did what, when, and from where.
Sign-in done properly
- Passwords are hashed with scrypt. Nobody here can read yours, including us.
- Reset links work once, expire quickly, and only their fingerprint is stored.
- “Sign out everywhere” ends every other session in one tap.
- Signing in with OrchestratOS is optional, and uses a one-time code with PKCE.
AI on a short leash
- Sprocket suggests and drafts. A person always confirms before anything is posted.
- His guesses are labelled as hunches, so you know what to double-check.
- We don't use your books to train AI models.
No tracking, here or in the app
- This website sets no cookies and runs no analytics or ad trackers. That's why there's no cookie banner.
- The app only uses the cookies it needs to keep you signed in.
- UK records are kept for six years, because HMRC says so, and not for anything else.
Spotted something that doesn't look right?
If you think you've found a security problem, please tell us before anyone else: email chris@positivemindsuccess.com with what you saw and how to see it again. We'll reply quickly, keep you posted, and thank you properly.