Legal

Security

How the platform is built to protect your books.

Architecture

Customer traffic and platform administration run on separate domains with separate front controllers and separate identity pools — a customer session can never open the admin surface, and an admin identity never logs into the customer app.

Access

Sign-in supports time-based two-factor codes; passkeys are available on the API path. Sensitive operations re-check a fresh factor. Every workspace row is scoped on every query — a request for another workspace's data returns nothing, not an error.

Auditability

Ledger writes are append-only: posted entries never change, corrections reverse. Audit chains are hash-linked, and privileged platform actions carry a typed reason and case reference.

Infrastructure

TLS everywhere, least-privilege database identities (runtime, billing, migrate — each sees only its own tables), encrypted backups, and uploads stored outside the web root. Secrets in the database are encrypted and never returned to the client.

Something to report? support@bixmoney.com.