Security questionnaire
Answers for firm admins and procurement.
Use this page as a starting point for security reviews. For formal questionnaires, contact us and we will route the request.
Authentication
Dashboard access requires authenticated users when Supabase is configured. Email/password and Google sign-in are supported.
Session timeout
CloseBooks requires re-authentication after inactivity and surfaces session visibility in firm settings.
AI processing
AI requests may include transaction descriptions, amounts, correction hints, and chart-of-accounts data needed to generate suggestions.
Human review
AI suggestions are reviewed through confidence scores, validation flags, and approval workflows before export.
Billing
Payment methods and invoices are handled by Stripe. CloseBooks does not store card numbers.
Compliance status
CloseBooks does not currently claim SOC 2 or ISO certification. Formal compliance work is part of the roadmap.
Need a formal response?
Send your security questionnaire or DPA request through Contact. We will route it to the right owner.