It is built so it cannot do the thing you are worried about.
It cannot move money. It cannot file a return or close your month. It cannot act above your limit without a person. Everything it does is recorded, encrypted and yours to export.
What it can do, and what it can never do.
Inside your limits, it can
- Read invoices, bills and transactions through the access you grant
- Send reminders in the tone and at the times you set
- Code bills and match bank lines it is confident about
- Draft new journal entries and hold them for review
- Prepare payment runs for a person to release
- Record every action with what it saw and the rule it used
Whatever anyone tells it, it can never
- Start a payment, transfer or refund
- File a tax return or lock an accounting period
- Act above your limit without a person
- Contact anyone you have marked sensitive
- Delete records from your books or edit the audit log
- Change a vendor’s bank details without a person checking
- Follow instructions hidden inside an email or a document
Where your data goes, and who can see it.
- Your systems
- Your books, bank feeds, mailboxes and documents stay where they are.
- The connection
- Standard sign in connections with the fewest permissions the job needs. You can revoke them from your side at any time.
- Your workspace
- Encrypted, one company per workspace, hosted in the United States. Never used to train models.
- Our people
- The two founders, in New York, under strict access controls. Every access is logged.
- The companies we use
- Hosting, model inference and email, each listed with what they receive on our subprocessors page.
Controls that come switched on.
Access
Sign in with Google or Microsoft, with two factorStandard
Roles: approver, reviewer, readerStandard
Integration tokens with the fewest permissionsRevocable by you
Sign in again before approving above your limitStandard
Your data
Encrypted in transit and at restTLS 1.2 or later, AES 256
One workspace per companyNo shared queries
Never used to train modelsContractual with Anthropic, our model provider
Deleted after you leaveWithin 30 days of your request
Limits
Hard limits in the software, not instructionsAlways on
Approval limits by amount, party, account, actionYou set them
Uncertain matches and codes wait for a personAlways on
Sensitive customers and vendors never contactedYou mark them
Operations
Append only audit logExportable
Versioned, reviewed releasesStandard
Breach notice to youWithin 72 hours
SOC 2 Type 2Designed for it, audit on the roadmap
We are not SOC 2 certified yet. We build against its controls and will tell you exactly where the audit stands if you ask. Found a vulnerability? Write to Stratumai.co@gmail.com; our disclosure policy explains how we handle reports. We acknowledge every report within 2 business days.
Ask us anything before you connect.
Your security questionnaire, your accountant’s questions, the thing you would want to know before giving anyone access to your books. A founder answers within one business day.