Trust & Security Architecture
QuickFinSync was engineered from the ground up for CPAs, bookkeeping practices, and enterprise finance teams who manage sensitive client banking records. We prioritize mathematical verification and zero permanent data warehousing over cloud lock-in.
Direct Reconciler Mode (Solo Engine)
When processing statements in the Reconciler Studio directly from your device, execution happens entirely inside your browser's WebAssembly and JavaScript sandbox.
- Zero Server Transmission: Raw bank PDFs, CSVs, and transaction rows never cross a network wire to our servers.
- Volatile RAM Only: When you close or refresh your browser tab, memory is instantly reclaimed by your operating system.
- No Cloud Scraping: Your client transactions are never analyzed for advertising, machine learning models, or data aggregation.
Bookkeeper Hub (Client Magic Uploads)
When requesting statements from clients via tokenized upload links (`/portal/[token]`), parsed data is staged temporarily on our server for you to retrieve.
- Local Client Parsing: The client's browser parses the PDF locally. Raw PDF files are never uploaded.
- Encrypted in transit: Structured transaction tables are sent over HTTPS (TLS) and stored in a private PostgreSQL database that is not reachable from the internet.
- Automated 7-Day Purge: Staged records are permanently deleted by an automated hourly job once they are 7 days old.
Regulatory Alignment for CPA & Accounting Practices
How QuickFinSync supports your professional obligations under federal financial privacy statutes.
GLBA Alignment
Under the Gramm-Leach-Bliley Act, financial institutions and tax preparers must protect non-public personal information (NPI). By keeping core parsing client-side, QuickFinSync eliminates third-party data warehousing risks.
FTC Safeguards Rule
Complies with strict access controls, multi-factor authentication, cryptographic data isolation, and automated data destruction protocols for customer records.
Automated Data Minimization
We believe the safest customer record is the one we never keep. Our database stores only authenticated user credentials, tenant rule mappings, and ephemeral audit hashes.
Infrastructure & Encryption Standards
Production cloud deployment specifications.
Have specific firm security or compliance questions?
Contact our engineering security desk for custom vendor assessment questionnaires or enterprise security reviews.