Security
When you run many clients, the bar for trust is high. Isolation, enforced permissions, and an immutable history were part of the design from the start.
Each firm's data is isolated at the database level. Your work is never visible to any other firm. That's how the system is built, not a setting someone can flip.
Bookkeeper, supervisor, accountant, and more. Every action checks the user's role before it runs, so a hidden button is never the only thing standing between someone and data they shouldn't see.
Nothing gets silently rewritten. Each change links cryptographically to the one before it, so an altered record after the fact would break the chain and surface immediately.
A scheduled job re-verifies the chain regularly, so a closed period stays provable months later, when an audit actually asks.
Data is encrypted on the wire and in storage, using current industry-standard protocols.
Bank links are handled through Plaid, so credentials are never stored on our side.
If you believe you've found a security issue, we want to hear about it. Email support@ziepie.com with the details: what you found, how to reproduce it, and what you think the impact is. We acknowledge reports within three business days and will keep you informed as we investigate and fix the issue.
Our disclosure policy is simple. If you make a good-faith effort to follow these rules, we will not pursue legal action against you for your research, and we will work with you on timing before anything is published:
We do not currently run a paid bug bounty, but we credit researchers who report valid issues if they would like to be named.
We do not currently hold any third-party security certification or attestation. What we can offer today is transparency: the controls described on this page, a written description of our architecture and practices, and direct answers to your security questionnaire. If your firm needs that documentation or a security review, get in touch and we'll tell you exactly where we are.
Ask us anything. We'd rather be clear up front than leave you wondering.