Security & Confidentiality

Last updated: August 29, 2026

Proof of Work Financials handles your bank feeds, source documents, and financial records. We built our security posture to match the trust that requires. This page describes how we protect your information — the mechanics, not the marketing.

How data reaches us

You share documents through encrypted portals — read-only bank-feed connectors, a secure client portal, or encrypted email. We never ask for full-access banking credentials, and we do not store passwords to your bank or accounting systems. Where possible, we operate through read-only or scoped-access integrations that limit what we can see to what we need.

Where it lives

Client data is stored in access-controlled cloud systems provided by established vendors — accounting software, encrypted document storage, and secure workpaper repositories. Data is encrypted in transit (TLS 1.2 or higher) and at rest using vendor-standard encryption.

Who can access it

Access to client data is role-based and least-privilege — only the assigned accountant, the U.S.-based reviewer, and firm leadership can access a given engagement's files. Every team member is under a written confidentiality agreement. Access is individually credentialed, multi-factor authenticated, and logged. Access is revoked promptly on role change or departure.

How long we keep it

We retain client records for the period required by applicable tax and accounting recordkeeping rules, and no longer than necessary for our engagement with you. On engagement termination, working files and portal access are archived and access is closed within thirty days unless a longer retention is required by law.

If something goes wrong

If we become aware of unauthorized access to your data, we will notify you promptly, describe what happened, and tell you what we're doing about it. Report a security concern to hello@proofofworkfinancials.com.