Security In plain English

You’re trusting us with your books. Here’s exactly how we handle that.

Who decides what

NorthwindINV-3381$1,284.50

Approve:

Try approving with:

AI reads. It never approves.

Guardrails check. They never approve.

You approve.

Never decides a number, a match or a threshold.

Guardrails

Plain, tested rules. Same input, same answer, every time.

You

Nothing posts, sends or pays on its own.

Fidurant never moves money. Payments are prepared for you to send from your own bank.

Each business is walled off. Every request is checked against the business it belongs to. One customer’s data is never visible to another.
Roles, not shared passwords. Owners, reviewers, uploaders and read-only viewers each see and do only what their role allows.
Everything is on the record. Every change is logged with who made it, when, and from which device and network.
Sign-in is handled by Clerk, a dedicated identity provider.

Encrypted in transit and at rest. HTTPS everywhere; the database and document storage are encrypted on disk.
QuickBooks connection keys are encrypted a second time, separately from the rest of your data.
Tax IDs are masked on screen and left out of exports.
Tax IDmasked, ending3907
Every upload is checked for malware, file type and size before anything reads it.

Documents are read using Microsoft Azure and OpenAI. Your data is not used to train AI models.
The fraud and error checks don’t use AI at all.
Fidurant runs on Amazon Web Services. The full list of providers is in our privacy policy.

Export your records whenever you like.
Close your account and there is a 90-day wind-down, after which your data is permanently deleted.
Deletion requests are completed within 30 days. Backup copies expire within 35 days.

Email support@fidurant.com and we’ll respond quickly. Our security.txt has the details.

Pilot Now open

Write to us about anything on this page. A person who builds Fidurant answers.