You hold other people's financial lives. We act like it.
Plain answers to the questions your engagement letter, your insurer, and your conscience require you to ask.
Data is encrypted in transit (TLS 1.2+) and at rest (AES 256). Client documents, messages, and financial records included, always, on every tier.
Two factor authentication for firm users. Role based permissions so staff see what their role warrants. Client portal access via expiring secure links, scoped to that client only.
Every action on every file is logged: who, what, when. eSignatures carry full audit trails. When someone official asks, you answer with a record, not a recollection.
US firm data is hosted in the United States; Canadian firm data in Canada. Cross border residency questions from your regulator have a one sentence answer.
Continuous backups, tested restores, and a documented recovery plan. Deleted items are recoverable by admins for 30 days.
Full export in usable formats, any time, including mid contract and mid migration. We do not sell, mine, or train on your client data. The subscription is the business model.
Card and bank payment details are handled by Stripe and never touch our servers. PCI compliance rides on infrastructure built for exactly that.
If an incident ever affects your data, you hear it from us first, quickly and completely.
Compliance documentation, subprocessor lists, and our security questionnaire responses are available on request: security@untangly.com. Your IT consultant is welcome on the demo call.