For accounting firms there is no compromise when it comes to security

AI has brought into focus additional questions for enterprise security, which is why Basis is built with multiple layers of industry-standard security to protect your clients' data. We're SOC 2 Type II certified for Security, Availability, and Confidentiality.

SOC 2 Type II certified compliance
Data stored in USA
Multi-factor authentication

Never expose account credentials

Basis will never store the credentials to financial institutions or accounting systems. When you configure Basis, we create a "handshake" that allows Basis to use revocable tokens to access your data via secure APIs.

Encryption, everywhere

  • Basis automatically encrypts your data at rest to prevent unauthorized access
  • We use AES-256, HMAC and other industry standards that safeguard millions of applications around the world
  • Our platform is secured with HTTPS, which uses TLS and certificates to ensure that your data is encrypted when transmitted between our services

Data Control & Privacy

  • All data stored exclusively in the USA
  • We do not share or sell any information about your firm or your clients with third-parties
  • Basis does not use client data to train public models
  • You can remove your data at any point
  • Strict data segregation between customers and role-based access control

Security Operations

  • Regular vulnerability scanning and penetration testing
  • Comprehensive incident response program
  • Daily encrypted backups with geographic redundancy
  • Secure cloud infrastructure with enterprise-grade providers

Documentation & Compliance

For detailed information about our security controls and compliance program, we provide:

  • SOC 2 Type II Report (available under NDA)
  • Additional compliance documentation upon request