Security

Security at Finaxis, at a glance

Where your data lives, who can reach it and how it is protected.

  • Hosted in Canada
  • CASA Tier 2 verified
  • Encrypted in transit and at rest
  • Data never sold

IT team: every control is in the trust center.

Certifications

Assessed by an independent lab

Finaxis

CASA Tier 2

Verified

Finaxis is CASA Tier 2 verified by the App Defense Alliance. Assessment carried out by an authorized lab against the OWASP Application Security Verification Standard (ASVS).

Letter of validation on request.

How Finaxis works

From your accounting system to your customers

  1. Your accounting system

    Direct connection or import

    Connection authorized by you, revocable at any time.

  2. Finaxis

    Your account, hosted in Canada

    Separate from every other customer's. Access by each user's role.

  3. Your customers

    The reminders

    Sent from your mailbox (Google Workspace, Microsoft 365) or a Finaxis address. Voice is in beta.

Your data

Your data

Hosted in Canada
Customer data and AI infrastructure are hosted in Canada.
Kept apart
Each customer account is logically isolated. One customer's data is never accessible to another.
Encrypted
In transit and at rest.
No shared AI training
Your data trains no AI model shared across customers.
Never sold
Never sold or used for advertising.
Vulnerability scanning
The code and its dependencies are scanned automatically for known vulnerabilities.

Access

Who can see what

Finaxis supports its customers' compliance with Quebec's Law 25 and with PIPEDA.

  • Single sign-on

    Sign in with Google or Microsoft, or with a passkey.

  • Two-factor authentication

    By app, SMS or recovery codes. An administrator can require it for the whole account.

  • Roles and permissions

    Four roles, from administrator to guest. A user can be limited to the customers assigned to them. The Nova plan lets you create and manage more granular access roles than the Billie plan.

  • Activity log

    Who did what, when and from where.

On request

The security file

These documents go to the people evaluating Finaxis.

Request the security file
Every control is in the trust center
  • CASA Tier 2 letter of validation
  • List of subprocessors
  • Answers to your security questionnaire

Frequently asked questions

Customer data and AI infrastructure are hosted in Canada.

No certification exists for Quebec's Law 25 or for PIPEDA. Finaxis supports its customers' compliance with both laws.

Your data trains no AI model shared across customers.

CASA is the Cloud Application Security Assessment of the App Defense Alliance. At Tier 2, an authorized lab tests the application against the OWASP ASVS standard. Finaxis is CASA Tier 2 verified; the letter of validation is sent on request.

Yes, on request, with the CASA Tier 2 letter of validation.

Retention, rights and the use of personal information: privacy policy.