Security management
Certification of the information security management system.
Security for your company's accounting
A dedicated environment and database per client, encrypted read-only connections and organisation-level permissions.
Certifications and data protection
Security and data protection standards that support your operations.
Assessed controls
Report assessing controls and their operation over the audited period.
Data protection
Personal data processing under the General Data Protection Regulation.
The details of these certifications are in the trust center of Stakely, the company that operates Conta Finance. Does your procurement process require security documentation? Request it from our team.
Client isolation
A separate environment and database for each client
An accounting firm can work with multiple companies without combining their data in one database. Each client retains an independent deployment and database.
Your team enters only authorised organisations, with the permissions assigned in each one.
Your Team
Company AIsolated deploymentDedicated databaseOwn permissions
Company BIsolated deploymentDedicated databaseOwn permissions
Company CIsolated deploymentDedicated databaseOwn permissions
Sign-in, permissions and encryption
From connecting an account to reviewing accounting records.
Passwordless access
Sign in with Google, Microsoft or a one-time code sent to your email. Add a second factor with TOTP codes.
Organisation and Team permissions
Define who can view, work on or review each organisation. Access to one company does not grant access to others.
Read-only connections
Exchange API keys are encrypted and use read-only permissions. Conta Finance does not custody your funds or require withdrawal permission.
Separate data for each client
Each client has an isolated database and deployment. Data from different organisations is kept separate.
Encryption and data protection
We protect data at rest and in transit. Personal data processing follows GDPR.
Traceability for review
The change log records who made each modification. ContaGPT proposals require human confirmation.
Security FAQ
Answers for finance teams, accounting firms and IT leads.
Can Conta Finance move my company's funds?
No. Exchange connections use read-only API keys. Conta Finance does not custody funds or request withdrawal permissions.
Can a person have different permissions in each company?
Yes. Access and permissions are defined by organisation and Team. A user can work in one company and have read-only access in another.
How does my team sign in?
Sign in with Google, Microsoft or a one-time code sent by email, without a Conta Finance password. Add a TOTP second factor for stronger authentication.
Is GDPR a security certification?
No. GDPR is the personal data protection framework. ISO 27001 certifies a management system. SOC 2 Type II is a report assessing controls.
Request security documentation
We review access, isolation and the documentation your company needs with your team.