Access permissions
Users must sign in and permissions restrict which finance functions and company information they may use.
Privacy-conscious design for finance work
Finance records are sensitive. IST Finance includes role controls, authenticated workspaces and secure-session settings, while the deployment operator remains responsible for the hosting infrastructure.
Company separation
Business operations are scoped to the associated company, with owner and finance roles controlling relevant actions.
Session and form safeguards
Production deployments require HTTPS session cookies. Forms include CSRF defenses and login rate limiting.
Hosting responsibilities
Use HTTPS, protect environment variables, maintain encrypted backups, test restores, and monitor access logs.
Financial audit history
Audit trails and restrictions on changing posted journal records support review, although the database administrator retains direct access.
No software can promise absolute security. Deployments must be tested and maintained by their operators.
Back to homepage