How Frac keeps your books safe.
The specifics, not badges: what keeps one company's books away from another's, where your bank credentials go, and who can reach your ledger.
Controls
Each company’s books, sealed off
Companies are kept apart by the database itself, with Postgres row-level security, not just by the app’s code. A request for one company’s books can’t read another’s.
Bank credentials encrypted at rest
The API keys you paste from Brex, Meow and Wise are encrypted with AES-256-GCM before they’re stored. Only an owner of the company can change them.
Sign in with GitHub or Google
There’s no Frac password to leak. Sessions end after 7 days, and signing out ends one at once.
AI access you can see and revoke
An assistant connects with OAuth for one company at a time, read-only or read and write, and acts as you, never more. Every connection is listed in Settings and can be revoked there. Tokens are stored only as hashes.
Backed up every night
The database is backed up nightly, and the app runs on AWS in the United States.
No AI reading your books
Frac sends your data to no model. The only AI that ever sees your books is one you connect yourself.
What we don’t claim.
Frac isn’t SOC 2 certified and hasn’t been through a third-party audit. When that changes, this page will say so, with the report.
Found a problem?
If you think you’ve found a security issue in Frac, email m@emptyspaces.ai with what you saw and how to reproduce it. Please give us a chance to fix it before you share it.
About your data.
Is my data safe?
Each company’s books are kept apart by the database itself, with row-level security. Bank credentials are encrypted at rest, the database is backed up nightly, and sessions end after 7 days. Frac isn’t SOC 2 certified.
How do I delete my company’s data?
Email m@emptyspaces.ai from an owner’s address and we’ll delete the company’s books. Self-serve deletion isn’t built yet.
Start your books today. It’s free.
Sign in with GitHub or Google, name your company and connect Brex, Meow or Wise. The first sync brings in each account’s full history.