Who can see and change what?
- Standard roles plus a permission matrix your administrator controls.
- Site engineers see only the projects they are assigned to.
- Approval rules on the documents that need them.
- The self-service employee role sees only the employee's own payslips and requests.
How are sign-ins protected?
- Accounts lock after repeated failed sign-in attempts, and sign-in attempts are rate-limited.
- Sessions time out after inactivity; the time and address of each sign-in are recorded.
- Administrators can require a password change.
- Every page is served over HTTPS, with HTTP Strict Transport Security.
How is financial data kept trustworthy?
- Double-entry accounting: every posting balances or is refused.
- Posted entries cannot be edited. Corrections are made by reversal.
- An audit trail records changes to financial records.
- Financial records are never hard-deleted.
- Each company's data is kept separate from every other company's.
What about backups and your own data?
- The database is backed up automatically every day.
- Reports and documents export to Excel and PDF, so your data stays yours.
- Stored credentials, such as your email server password, are encrypted.
How we handle personal data on this website is set out in our Privacy Policy.