SOC 2 Type II
Independently audited controls every year.
Security & Trust
Your people data, budgets and payments are protected by the same controls the largest finance teams demand.
Independently audited controls every year.
Aligned with international privacy expectations for global teams.
TLS 1.2+ in transit, AES-256 at rest, keys rotated automatically.
Single sign-on with your identity provider.
Monitoring with real-time alerts and pen tests.
Budget owner, admin and view-only roles are scoped down to budget level. Everyone signs in through your identity provider, and permission changes take effect immediately with full audit history.
Set tiered approvals by amount, team or event type. Requests route to the right budget owner automatically, and every approval and rejection is logged for audit.
Choose the vetting depth per vendor, from identity checks to full compliance. Every check runs before any payment leaves, in 100+ countries.
Every approval, change and payment is logged with who, what and when. The history is exportable, so finance and audit always have the full picture.