Data access & security

What Finnovator can, and cannot, access.

When you connect your books, you grant a read-only link, nothing more. This page sets out exactly what that means: the scopes we request, what we can never do, where your data lives, and how to export or delete it.

What read-only means in practice

The exact OAuth scopes we request.

What we can read
Chart of accounts accounting.settings.read
Your account names and structure, to map them to the Finnovator model.
Transactions & journals accounting.transactions.read
Posted entries, to calculate burn, runway and margin.
Bank balances & feeds accounting.banktransactions.read
Reconciled balances, so cash traces to a real source.
Invoices & bills accounting.contacts.read
Receivables and payables, for the AR/AP ageing in your pack.
What we can never do
Create, edit or delete anything in your ledger. We hold no write scope at all.
Move money or make payments. We never touch payment rails or bank instructions.
Change your books or reconciliations. Your accountant's work is untouched.
Read payroll personal data. Where payroll connects, we take totals only, never individual records.
Scope names follow the Xero API; QuickBooks and Sage request the equivalent read-only scopes. You see and approve the exact list in your provider's own consent screen before anything connects.

A full audit log

Every read, sync and export is logged with a timestamp and reason. You can see the full history from your settings, and so can your auditor.

UK data residency

Your data is stored and processed in UK-based data centres, encrypted at rest with AES-256 and in transit with TLS 1.3. We do not move it outside the UK.

Export & delete, anytime

Export everything we hold as CSV or PDF whenever you want. Revoke the connection in one click, and request full deletion: we remove your data within 30 days and confirm in writing.

The connection, start to finish.

01
You approve
You see the exact read-only scopes in your provider's consent screen and approve them yourself.
02
We read
We pull the figures we need on a schedule. Every pull is logged. Nothing is written back.
03
You can review
Open the audit log anytime to see exactly what was accessed, and when.
04
You revoke
Disconnect in one click. Access stops immediately; deletion follows on request.

Ready to connect, read-only?

Nothing in your ledger changes. You can disconnect at any time.

Connect your books Back to security
Finnovator is a software platform provided by Finnovator Ltd. Accounting and CFO services, where engaged, are provided by Terramont CFO. This page describes the platform's data handling and is not a substitute for our full privacy notice.