Books you can
actually trust.
Honest, practical security for church finances. Every change recorded in an audit log, sensitive credentials AES-256 encrypted at rest, daily backups, and HTTPS in transit. No SOC 2 badge — just the practices a careful treasurer would actually want.
No credit card required · 7-day free trial · Cancel anytime
Every change, on the record.
Edits, deletions, logins, role changes, reconciliations — anything that touches the books is recorded with the user, action, and timestamp. Searchable, filterable, exportable.
- Who did what, whenEvery entry pins a real user to an action — no shared accounts, no anonymous changes.
- Before & afterFor edits, the log records what changed — old value, new value, on which field.
- ExportableDownload the full log as CSV for auditors. Filterable by user, date, action type.
- Append-onlyAudit entries can't be edited or deleted — even by an admin. The log is the source of truth.
Your data, always yours.
Daily automatic backups protect against data loss. On-demand export lets you pull a copy of everything — donors, transactions, funds — as JSON or CSV anytime.
- Daily automatic backupsProduction database snapshot every day, retained on Neon's point-in-time recovery.
- On-demand exportTrigger a full data export anytime. Get a downloadable file with every record.
- Cancel and walk awayNo data hostage situation. Cancel your subscription, export your data — it's yours.
Said plainly. No bank-level theater.
Here's exactly what protects your church's data. No marketing superlatives — just the practices.
Every request between your browser and our servers travels over HTTPS with strong TLS. Certificates auto-renew via Let's Encrypt.
- HSTS enabled
- TLS 1.2 minimum
- No mixed content
Sensitive credentials — Stripe API keys, OAuth tokens, integration secrets — are encrypted with AES-256-GCM before being written to the database.
- AES-256-GCM
- Key rotation supported
- No plaintext secrets
We use Better Auth with industry-standard password hashing. Your password is hashed and verified — never logged, never visible to us.
- Argon2 / bcrypt hashing
- Salted per user
- No plaintext storage
Card numbers and bank details never touch our servers. Stripe (PCI DSS Level 1) handles all card data. We store only tokens that reference Stripe customers.
- PCI Level 1 (Stripe)
- Tokenized customer IDs
- Webhook signatures verified
No SOC 2 badge. No HIPAA claim. Just the practices an attentive treasurer would want — and a willingness to say so.
A door for outside reviewers.
Year-end audit doesn't need to be a PDF scramble. Invite your CPA or outside auditor with a scoped, read-only account — they review ledgers and reports directly, with no risk of edits.
- Read-only accessAuditors can view everything — but cannot edit, delete, or move money.
- Time-boundGrant access for the audit window. Revoke the moment the review is done.
- Audit log includedAuditors see the full audit log alongside the books — they can verify edits at the source.
What we actually do, said plainly.
No SOC 2, no HIPAA
We have not pursued either certification. We tell you that up front because the alternative — vague badges — is the opposite of trust.
Payments by Stripe
Card numbers and bank details never touch our servers. Stripe (PCI DSS Level 1) handles all card data.
Append-only audit log
The log records every change. Even admins can't edit or delete entries — the log is the source of truth.
What boards ask first.
Books your board can verify.
Every change recorded. Every dollar accounted for. Try every feature for seven days. No credit card.
7-day free trial · Cancel anytime · No credit card required