How Entirova keeps your books safe
Accounting and payroll data is some of the most sensitive a business holds. Here is what protects it today, and what's coming next.
Your data is kept separate
Every company's books sit behind the same server-side checks, whoever is signed in.
Tenant isolation
Every record carries its organisation. Database row-level security stops one company ever reading another's data.
Rules enforced on the server
Every save is checked by the server against your role, so the rules can't be bypassed from the browser.
Role-based reads
Anyone whose user group doesn't include payroll sees employees as a directory only: no salaries, bank details, ID numbers or pay runs are sent to their device.
Company-limited roles
A custom role limited to some of your companies only receives those companies' records.
Encrypted in transit and at rest
Connections use HTTPS only (HSTS), and the database is encrypted on disk.
Daily backups & point-in-time recovery
Restore the whole system to any moment in the last days, not just last night.
Signing in
Controls for each person, and rules owners and admins set for everyone.
Two-factor authentication
A 6-digit code from an authenticator app on top of your password.
Require two-factor for everyone
One switch makes it compulsory. Anyone without it can't see or change anything until they set it up.
Lockout after failed attempts
Repeated wrong passwords lock sign-in for a while, slowing down password guessing.
Sign out after inactivity
Unattended computers sign out after 30 minutes, or the time you choose.
Sign out everywhere
End your other sessions, or an admin ends someone's sessions on every device within seconds.
Confirmed emails & expiring invites
New accounts confirm their email first, and invitations stop working after the days you set.
Passkeys
Sign in with Face ID, Touch ID or a security key instead of a password.
Single sign-on
Sign in through Microsoft Entra, Google Workspace or Okta.
New device alerts
An email when your account is used from a new device or country.
Bot protection
A human check on sign-in, sign-up and password reset.
Controls on the money
Checks that stop mistakes and fraud before they reach the books.
Approvals
Quotes, orders, bills, payments and pay runs can need approval, and nobody approves their own work.
Bank detail changes approved
A change to a supplier's bank details is used only after someone else approves it.
Locked periods
Once a period is closed, nothing dated in it can be added or changed.
Balanced, permanent journals
Every journal must balance, and posted journals can't be edited, only reversed.
Every action is on the record
So you can see who did what, and so can your auditor.
Activity log
Every change is recorded with who made it and when.
Error log
Technical errors from everyone in the organisation are collected for owners and admins, kept for 90 days.
Time-limited support access
Our support team can look at your books only when an owner grants it, read-only and for a set time, and it shows in your activity log.
Your data stays yours
Take it with you, or remove it, whenever you choose.
Export everything
Download a full backup, or export any list to CSV or Excel.
Protected deletion
Only an owner can delete an organisation, typing its exact name, with two-factor if required.
Hardened website
Security headers, a strict content security policy, and the app can't be loaded inside another site.
Want the details for your team? Read the sign-in security guide or the users & roles guide, or contact us with a security question.