Access and data
Least access, read-only first
Assessments start from a walkthrough and anonymized examples. Any further access is agreed in writing, read-only wherever the platform allows.
Credentials stay with you
Connections run under accounts your firm owns and can revoke at any time. We do not keep a copy of your passwords.
A person approves money
Automations prepare and check. Nothing is posted to a ledger or paid without a person at your firm approving it.
Sandbox before live books
Every build is tested on a test client file before it touches a real one.
No client data kept on our side
Data moves between your systems. We do not copy client books into our own storage, and logs hold only what is needed to fix a failed run.
In writing
An NDA before the first look, and a data processing agreement for any project that touches client data. We follow UK GDPR for UK firms and support US firms' written security plans.
Questions we expect you to ask
- Which accounts will you use, and who can revoke them?
- What data passes through the automation platform, and where is it hosted?
- What is logged, and for how long?
- What happens to access when the engagement ends?
- Who at Cudalo can see our systems?
We answer each of these in writing in the proposal, before any access is granted. When an engagement ends, we remove our access and hand over every credential and document.
Talk it through in 30 minutes.
Tell us how your firm runs month-end and where it slows down. We will tell you honestly whether an assessment is worth it.