Security

Your books, locked down.

1. Two step sign in for everyone: Google plus an authenticator code or a code by email, or a passkey.
2. No passwords to steal: Octobooks keeps none for your account.
3. Every booking is chained to the one before by a SHA-256 hash, so a changed entry shows.
4. Nothing booked can be deleted quietly: corrections are new entries, and every change is logged with who and when.
5. Each company's data is walled off in the database itself, not only in the app.
6. Your AI connects only after you approve it, and the switches you set decide what it may do.
7. Hosted in Germany: Hetzner, Nuremberg. Encrypted on the way (TLS 1.2 and 1.3 only) and in every backup.
8. Backups every night, encrypted, on our server in Germany and a second copy in Finland.
9. A security scan runs every month.
10. Nothing goes to a tax office for real until you switch filing on.

Found a weak spot? Write to hello@octobooks.ai with "Security" in the subject. We answer fast and thank you by name if you like.

Back to the start