Render
Primary hosting and managed infrastructure
Render supports Aidfine's hosting and managed infrastructure layer through audited platform controls, including SOC 2 Type II, ISO 27001, and GDPR DPA support.
Aidfine security
Security built for financial operations
Aidfine is designed to support secure bank reconciliation workflows, controlled access to sensitive financial data, internal controls, and the evidence finance teams need for audit-ready reviews.
Workspace-aware accessAudit-ready evidenceSecure file workflowsOperational monitoring
Infrastructure and service providers
Trusted provider layers for secure delivery
Aidfine uses trusted infrastructure and service providers to support secure delivery, availability, encrypted transport, and operational resilience. The information below describes provider-layer roles without exposing internal configuration details.
Cloudflare
Edge and traffic protection
Cloudflare supports Aidfine's edge protection layer for secure traffic delivery and network-level resilience.
Resend
Transactional email delivery
Resend supports transactional email delivery for account, security, and billing-related notifications.
| Provider | Purpose | Public compliance reference |
|---|---|---|
| Render | Cloud hosting and managed infrastructure | SOC 2 Type IIISO 27001GDPR DPA |
| Cloudflare | Edge network and traffic protection | SOC 2 Type IIISO 27001 |
| Resend | Transactional email delivery | SOC 2 Type II |
Provider attestations apply to the relevant service-provider layer. Aidfine’s application-level controls, access governance, and product security practices are maintained separately.
Security principles
Controls for finance data, people, and evidence
Aidfine keeps security visible across the product experience: from account access and file handling to reporting, review, and operational resilience.
Data protection
Customer data is handled through controlled product flows with workspace scoping, limited interface exposure, and security-conscious handling patterns designed for financial workflows.
Access control
Email verification, MFA support, protected sessions, and workspace roles help reduce unauthorized access to finance operations.
Audit-ready workflows
Reconciliation cycles, exports, reports, and selected audit events help teams preserve reviewable evidence.
Infrastructure security
Aidfine is built for cloud deployment patterns with health checks, managed data services, and cautious operational exposure.
Secure file handling
Bank statement and cashbook uploads move through structured, authenticated workflows with clear file expectations.
Operational resilience
Queue-backed processing, status tracking, logging, and monitoring patterns support reliable reconciliation operations.
Data protection
Financial data handled with controlled scope
Aidfine is designed around workspace-scoped finance workflows. The product minimizes unnecessary exposure in the interface and keeps reconciliation data tied to the customer context that owns it.
- Workspace and organization context is used across reconciliation, dashboard, reporting, and team workflows.
- Production deployments are designed to use encrypted communication paths such as HTTPS/TLS.
- Customer uploads and generated reports are handled through authenticated product flows.
- The Privacy Policy and DPA describe additional data handling and processor terms where applicable.
Access and identity
Identity controls for workspace teams
Aidfine supports account and session controls intended for professional finance teams, including verification and stronger authentication options where configured.
- Email verification flows are supported for account activation and onboarding.
- MFA/TOTP and backup codes are present in the product for additional account protection.
- Session protections are designed to support protected access across authenticated workflows.
- Workspace roles such as owner, admin, and user help separate operational responsibilities.
Auditability and controls
Evidence that supports review, not blind automation
Aidfine is built to help finance teams reconcile with traceability. The product supports human review, exports, and audit-oriented records without replacing professional judgment.
- Reconciliation reports and downloads support reviewable evidence packages.
- Where enabled, audit logs capture selected workspace, security, reporting, and administrative events.
- Team workspace actions such as user creation, onboarding resend, revocation, and role changes are logged.
- Aidfine supports reconciliation workflows and review processes, while customers remain responsible for their accounting, audit, and control conclusions.
Infrastructure and operations
Operational practices designed for secure finance workflows
Aidfine avoids exposing unnecessary implementation detail publicly, while relying on deployment patterns that support monitored, resilient operations.
- Public anti-abuse controls use Cloudflare Turnstile where configured.
- Metrics and logs are treated as operational tools and are restricted in production-oriented guidance.
- Security-sensitive implementation details, secrets, and credentials are not exposed in the frontend.
Security contact
For security-related concerns, please contact us with a clear description of the issue, affected area, and any safe reproduction details.
[email protected]Please do not include sensitive customer data, secrets, or exploit payloads unless specifically requested through a secure follow-up channel.
Ready to reconcile with confidence?
Bring bank reconciliation, controls, reporting, and audit evidence into a workflow designed with security and auditability in mind.