Access control
You decide who gets into your Accoru account. Invite teammates and your accountant by email, and give each person one of three roles.
- Admin
- Manages the company, its settings and who has access.
- Accountant
- Works in the books, for an in-house bookkeeper or outside accountant.
- Viewer
- Can look but not change anything.
Behind the roles, row-level security runs on every table in the database. Each request is checked against the company and role of the person making it, so a user can only read or change rows they are allowed to.
Activity log on every record
Every invoice, bill, payment, journal entry and contact keeps an activity log. Each entry shows what was done, who did it and when. If a number changes, you can see who changed it, which matters when you, your accountant and an auditor all work in the same books.
Encryption
- Your data is stored encrypted.
- All traffic between your browser and Accoru goes over HTTPS (TLS).
Card payments
When customers pay an invoice online, they pay through your own Stripe or PayPal account. Card details are entered with Stripe or PayPal and never reach Accoru, so we never store card numbers.
Your data stays yours
- Export all of your data at any time.
- Delete your account, and your data is deleted with it.
- We handle personal data in line with GDPR.
Report a security issue
If you think you have found a vulnerability, email us with a description and the steps to reproduce it. Please give us a reasonable amount of time to fix it before you disclose it publicly. A person reads every report.
support@accoru.comSecurity questions
Is my data encrypted?
Yes. Accoru stores your data encrypted, and all traffic between your browser and Accoru goes over HTTPS (TLS).
Does Accoru store my customers' card details?
No. Customers pay invoices through your own Stripe or PayPal account. Card details are entered with Stripe or PayPal and never reach or get stored by Accoru.
Who on my team can see what?
Each person you invite gets a role: admin, accountant or viewer. The role decides what they can see and change, and row-level security enforces it on every table.
Can I see who changed a record?
Yes. Every record has an activity log that shows each action, who took it and when.
Can I export or delete my data?
You can export all of your data at any time. You can also delete your account, which deletes your data.
How do I report a security issue?
Email support@accoru.com with the details and steps to reproduce. Please give us time to fix the issue before you disclose it publicly.