Enterprise-grade security for your financial data
SOC 2 Type II certified, read-only access to your books, and encryption on every byte. Here's exactly what that means for your business.

What's SOC 2 and why should you care?
Think of SOC 2 as the gold standard in data security. It's like having a team of independent security experts thoroughly inspect every aspect of how we handle your data. They don't just take our word for it – they verify everything.

Key benefits







SOC 2 Type II certified, audited annually
Independent third-party auditors verify our security controls every year against the same standard enterprise vendors meet.

Read-only access to QuickBooks & Xero
Clockwork never moves money, edits transactions, or writes to your books. We read your accounting and payroll data on a read-only basis.

AES-256 encryption at rest and in transit
Every byte of your financial data is encrypted with industry-standard ciphers, at rest on our servers and moving between services.

SSO and required MFA for admins
Single sign-on via Google or Microsoft. Multi-factor authentication is required for every admin user, with TOTP, hardware key, and platform authenticator support.

Full audit logs on every action
Every change to your account is logged with user, timestamp, and IP, exportable for compliance reviews.

Full audit logs on every action
Every change to your account is logged with user, timestamp, and IP, exportable for compliance reviews.
The five trust pillars we're certified in:
What this means for Clockwork users
When you connect your QuickBooks or Xero account with Clockwork, you're not just getting powerful financial forecasting – you're getting peace of mind. Here's what our SOC 2 Type II certification means for you:
For current users
- Your financial data is protected by security measures that meet or exceed industry standards
- Regular third-party audits ensure we maintain these high security standards
- Transparent data handling practices you can trust
- Continuous monitoring and improvement of our security protocols


For potential clients
- Confidence in choosing a financial forecasting partner that prioritizes your data security
- Assurance that your sensitive financial information will be handled with the utmost care
- Evidence of our long-term commitment to maintaining the highest security standards
- Peace of mind when connecting your accounting systems
Our commitment to your security
Getting SOC 2 certified isn't just a one-time achievement – it's an ongoing commitment. We continuously monitor, test, and improve our security measures to ensure your data stays protected as technology evolves.
What sets us apart


SOC 2 Type II certified, audited annually
Independent third-party auditors verify our security controls every year against the same standard enterprise vendors meet.
Get my forecast
Read-only access to QuickBooks & Xero
Clockwork never moves money, edits transactions, or writes to your books. We read your accounting and payroll data on a read-only basis.
Book a demo
AES-256 encryption at rest and in transit
Every byte of your financial data is encrypted with industry-standard ciphers, at rest on our servers and moving between services.
Get my forecast
SSO and required MFA for admins
Single sign-on via Google or Microsoft. Multi-factor authentication is required for every admin user, with TOTP, hardware key, and platform authenticator support.
Get my forecast
Full audit logs on every action
Every change to your account is logged with user, timestamp, and IP, exportable for compliance reviews.
Get my forecast
Annual penetration testing
External security firms test our systems for vulnerabilities every year before they can reach production.
Book a demoKey benefits

SOC 2 Type II certified, audited annually
Independent third-party auditors verify our security controls every year against the same standard enterprise vendors meet.
See it on your numbers
Read-only access to QuickBooks & Xero
Clockwork never moves money, edits transactions, or writes to your books. We read your accounting and payroll data on a read-only basis.
Let’s talk business
AES-256 encryption at rest and in transit
Every byte of your financial data is encrypted with industry-standard ciphers, at rest on our servers and moving between services.
See it on your numbersWho we integrate with





.png)
.png)

.png)
.png)

.avif)














.avif)







.avif)
