Security
Your money data, treated like it is our own.
You are trusting us with the numbers that run your business. We do not take that lightly. Here is plainly how your information is kept safe, who can reach it, and where in the world it lives.
In transit and at rest
Locked the whole way through.
Every byte that travels between your screen and our servers is encrypted. Once it arrives, it is encrypted again where it sits. Scrambled on the wire, scrambled on the disk.
How your data moves
Secure channelOn the wire
Industry-standard TLS protects every request between your browser and us.
On the disk
Stored data is encrypted where it lives, so a stolen drive reveals nothing.
Per-business isolation
Your business sits in its own sealed compartment.
Every business on Owner CFO is walled off from every other one at the database itself. The wall is not a setting we remember to switch on. It is built into how the data is read, so one business can never see another's numbers.
One database, sealed tenants
Row-level security, enforced on every read
Only you hold the key
Invisible to you
Invisible to you
Roles you set, owner, accountant, viewer, decide who in your own team sees what. Your accountant sees the business figures they need, and nothing personal you have not chosen to share.
Australian region
LiveData residency
Hosted in the Australian region.
Your records are stored on infrastructure in the Australian region, close to home for both New Zealand and Australian owners. Your numbers do not quietly drift across the world to wherever is cheapest. They stay where you expect them to be.
- Stored in the Australian region, serving NZ and AU
- Backed up so a single failure cannot lose your books
- NZ records kept for seven years, AU for five, as the rules require
The specifics
The short version, in plain words.
Encryption in transit and at rest
TLS protects data on the move. Stored data is encrypted on disk. Both, always, with no setting for you to flip.
Certified infrastructure
Built on cloud infrastructure that holds ISO 27001 certification, an independent standard for managing information securely.
Row-level isolation per business
Each business is sealed from every other at the database, so cross-tenant access is not possible by design.
Roles and least access
Owner, accountant, and viewer roles mean people see only what their job needs. Personal notes stay private to you.
Built to the published tax rules
Our GST, BAS, and income-tax logic follows the rules published by Inland Revenue and the ATO, with accountant review in our process.
You can export and leave
Your data is yours. Export it whenever you want and walk away in a couple of clicks. No lock-in.
We describe our practices in plain language rather than promising certifications we do not yet personally hold. As Owner CFO grows, our formal posture grows with it, and this page will say so honestly.
Ready?
Hand us the numbers. We will guard them like they are ours.
Start free, bring your books across in minutes, and leave whenever you like with your data in hand.
Questions about security? Email security@centriweb.com