Security
How your financial data is kept safe.
Focus on Cash holds real financial data for real businesses. Here is how it is protected, in plain English.
Each company's data is separate
Every table in the database has row-level security switched on. Each company's data is locked to the people allowed to see it, so one company cannot read another's. This is tested before each release.
For coaches and advisors, this means each client sees only their own company.
People see only what their role allows
Access is based on role. An advisor sees the client companies they manage. A client sees their own company and nothing else.
Two-step sign-in
Two-step sign-in with an authenticator app is built in.
Encryption
- Xero and QuickBooks connection tokens are stored encrypted (AES-256-GCM).
- API keys are stored hashed.
- Connections to the app and its database are encrypted in transit. Older, weaker versions (TLS 1.0 and 1.1) are refused.
Reviewed against a published standard
The software is reviewed against OWASP ASVS Level 2, the industry standard for applications that hold sensitive data.
Analytics stay off until you agree
Usage analytics stay off until you accept the cookie notice. Financial values are never sent to analytics.
Where your data lives
The database is hosted in Sydney.
Our suppliers
Supabase (database and logins), Cloudflare (hosting), Xero and QuickBooks (data sources), Resend (email), PostHog (usage analytics), Sentry (error reports) and GitHub (code). Each has SOC 2 or ISO 27001 security reports.
See it first
See your business clearly.
Mandy Walker, the founder, will walk you through the platform and answer your questions.