Security & data protection

Security you can put your name behind

When you put a client on PeakBooks, your reputation rides on it. Here's exactly how we protect their books, their bank connection, and their most sensitive numbers, in plain English, no jargon.

How your data is protected

Six layers, always on

No configuration, no add-on tier. Every account gets all of this by default.

🔒

Every client walled off

Row-level security isolates each client's books at the database itself. One client can never see another's data, and neither can any other firm on PeakBooks.

🏦

We never see bank logins

Bank connections run through Plaid. Your client's banking credentials go straight to their bank. PeakBooks never sees or stores them. Card payments run through Stripe.

🛡️

Sensitive fields encrypted

SSNs, EINs, and bank account numbers are encrypted at rest with AES-256-GCM. Everything travels over TLS in transit.

📝

Tamper-evident audit log

Every change is recorded: who edited what, and when. Ideal for review, and for standing behind the work you did.

👤

Least-privilege access + 2FA

Internal access is tightly limited and logged. Two-factor authentication is available for every firm member and every client.

♻️

Backed up & recoverable

Data is backed up continuously. When you delete data it's purged within 30 days; backups roll off within 90.

Ownership & portability

Your data is yours. Always.

Export any client's books (P&L, Balance Sheet, General Ledger, every transaction) to PDF and CSV in one click, anytime. If a client cancels, their books stay readable. And if you ever decide to leave PeakBooks, you take everything with you. No lock-in, no ransom, no "export is a paid feature."

One-click PDF + CSV export of every report
Cancelled clients stay readable: no data held hostage
Self-serve account & data deletion: you're in control
No export paywall, ever
Who we work with

The only companies that touch your data

We're transparent about every sub-processor. That's the whole list: no ad networks, no data brokers, no reselling.

PlaidSecure bank connections: your bank login goes to your bank, never to us.
StripePayment processing: card data goes straight to Stripe, never to us.
SupabaseEncrypted database hosting with row-level security.
CloudflareNetwork security, DDoS protection, and delivery.
AnthropicClaude for automatic transaction categorization. Your data is not used to train models.
Our promises

What we'll never do

🤝

Compete for your clients

PeakBooks is software — not a bookkeeping service. We don't sell bookkeeping, tax prep, or "live experts" to your clients, and there's no marketplace routing them elsewhere. The relationship is yours.

🚫

Sell your data

Your data and your clients' data is never sold, rented, or handed to advertisers. It's used to run PeakBooks for you, nothing else.

📤

Hold your data hostage

Export everything anytime, in formats you can actually use. Leaving is as easy as joining.

Try it with a sample client — zero risk

Spin up a fully-seeded demo company, kick the tires, then invite your first real client. Free for accountants, forever.