Safe Harbor
Our Security + Privacy Policies
At Tied Out Books, protecting your financial information is one of our highest priorities. Bookkeeping requires trust, and we believe that trust must be earned through transparent processes, secure technology, and consistent professionalism. Our security practices are designed to safeguard sensitive data at every point—from how you share documents with us to how we store and access them internally.
How We Keep Your Information Safe
Secure Platforms With Built-In Industry Standards
We rely on reputable, industry-leading software platforms that meet or exceed modern security standards. These systems are designed specifically to safeguard financial data and ensure privacy, giving our clients confidence that their information is handled with care.
Hubdoc
Used by our clients to upload receipts, invoices, and other financial paperwork, Hubdoc is certified under industry-standard security frameworks ISO/IEC 27001:2022 and SOC 2 Type II. They also employ multi-factor authentication and multilayered encryption during transfer and storage, and their compliance with international security standards is validated by a third-party auditor. For more details, see parent company Xero’s security page.
Bill.com
Bill.com’s Accounts Payable, Accounts Receivable, and Spend & Expense systems are all compliant with SOC 1 and SOC 2 standards, and employ a number of security protocols and software to protect client data — masking bank account information, safeguarding protected health information (for compliance with HIPAA), secure data centers in more than one physical location, encrypted data storage, and Transport Layer Security during transfer. Read more on their security page.
Financial Cents
Financial Cents encrypts all data, including file storage and internal communications, at rest and during transit. Data in the Client Vault is double encrypted unless actively in use, is only transmitted over an authenticated secure connection, and sensitive data is never revealed in email, in-app notifications, or audit trails. For more, see their security page.
Password Protection with 1Password
All credentials used by our team are stored exclusively in 1Password, a highly secure, encrypted password manager. 1Password uses end-to-end encryption, meaning only authorized team members can access the vault. They use AES-GCM-256 authenticated encryption, making it essentially impossible to decrypt even with cracking software. Read more here.
Company-Wide VPN
Tied Out Books maintains a company-wide Bitdefender Virtual Private Network (VPN) that all team members — local and remote — use when accessing client information. Bitdefender’s VPN runs on AES-256 encryption protocol with no traffic data logging. Read more here.
Controlled Access and Internal Protocols
We limit internal access on a need-to-know basis. Only authorized team members can access specific client files, software accounts, and shared documents. Our internal procedures include: Role-based access controls, prohibition of local storage of client files, and secure document-sharing portals.
These steps ensure your information stays protected at every stage.
Your Data, Your Control
We never sell, share, or disclose your information to third parties unless expressly required by law or necessary to perform bookkeeping services at your request. You retain ownership over your documents and data at all times, and you may request copies or removal at any time.
Questions About Security?
We believe transparency builds confidence. If you ever have questions about how your data is stored, who can access it, or how any of our systems operate, we’re happy to talk through the details.
