Security & data integrity
Cheerful on the outside. Serious underneath.
Your books are only useful if you can trust them. That is why the core accounting rules live in the database itself, not just in the app.
Ledger guarantees
Rules your books cannot break.
Balanced, always
The database checks every journal entry when it is committed and rejects any entry whose debits do not equal its credits.
Append-only journal
Posted journal entries cannot be edited or deleted. Corrections are made with reversing entries, so history is never rewritten.
Company isolation
Every record carries its company, and every link between records is checked against it, so no row can ever reference another company's data.
Void, don't vanish
Accounts, customers, items, invoices and payments are deactivated or voided instead of deleted, and invoice balances are always recomputed from live payments.
Access & accountability
The right people, the right access.
Secure sessions
The app is served only over HTTPS, and browser sign-ins use HttpOnly, SameSite=Strict cookies that page scripts cannot read.
Users & roles
Invite teammates and accountants with their own sign-ins and control what each person can do.
Audit log
See who changed what and when, so questions about your books always have an answer.
Sign-in protection
Every sign-in attempt is logged with time, IP address and device. Repeated failed attempts trigger alerts to you and to us.
Two-step sign-in
With an authenticator app, a text message code or recovery codes.
Staff access, only with permission
Our support team can open your company only with your permission, read-only, for up to 60 minutes. It's logged, and you're emailed when it starts and ends.
Bank data
Bank connections run through Plaid; access tokens are encrypted.
No third-party trackers
No third-party trackers in the app. We measure feature usage ourselves.
Questions about your data?
We are happy to walk you or your IT team through how Cheery Books keeps your books safe.