Security Policy
How AutoBooks protects accounts and uploaded financial documents.
Security Policy
Effective Date: July 31, 2026
1. Purpose
AutoBooks ("AutoBooks," "we," "our," or "us") is committed to protecting customer information through the use of appropriate administrative, technical, and operational security measures.
This Security Policy describes the security practices used to protect our platform, customer accounts, and financial data processed through our services.
2. Security Principles
Our security program is designed around the following principles:
- Protect customer information.
- Minimize unnecessary data retention.
- Limit access to authorized users.
- Reduce exposure to common web application threats.
- Continuously improve security practices.
3. Authentication and Account Security
AutoBooks protects customer accounts using secure authentication practices.
These include:
- Secure password hashing.
- Authenticated user sessions.
- Account authorization checks before accessing protected resources.
- Secure logout procedures that remove active sessions.
Where supported, trusted third-party authentication providers may also be used.
4. Authorization and Access Control
Access to customer information is restricted to authorized users.
AutoBooks verifies user authorization before allowing access to protected application features and downloadable files.
Generated bookkeeping packages are associated with the account that created them and are accessible only by that authorized user.
5. Financial Document Processing
Uploaded bank statements and credit card statements are processed only for the purpose requested by the customer.
Financial documents are processed temporarily and are not retained as permanent account records after processing has completed.
Temporary processing files are removed when they are no longer required.
6. Temporary File Security
Generated bookkeeping exports are intended only for customer download.
To reduce unnecessary storage of financial information, AutoBooks automatically removes temporary generated files through its download lifecycle and cleanup processes.
This includes cleanup after:
- User completion of downloads.
- User logout.
- Creation of a new replacement package.
- Automatic cleanup of abandoned temporary files.
7. Application Security
AutoBooks incorporates multiple layers of application security designed to reduce common web application risks.
These measures include, where applicable:
- Cross-Site Request Forgery (CSRF) protection.
- Rate limiting for sensitive operations.
- Secure session handling.
- File upload validation.
- Input validation.
- Authorization checks.
- Error handling designed to reduce unnecessary information disclosure.
Security measures may be enhanced as the platform evolves.
8. Infrastructure Security
AutoBooks is designed to operate using secure hosting environments and industry-standard transport encryption.
Access to production infrastructure is limited to authorized administrators responsible for operating and maintaining the service.
9. Monitoring and Security Improvements
We regularly review and improve the security of the AutoBooks platform.
Security improvements may include:
- Application updates.
- Dependency updates.
- Security hardening.
- Vulnerability remediation.
- Operational monitoring.
- Additional protective controls as the platform evolves.
10. Customer Responsibilities
Customers also play an important role in protecting their accounts.
Customers are responsible for:
- Maintaining the confidentiality of their account credentials.
- Using strong passwords.
- Protecting their own downloaded bookkeeping files.
- Signing out of shared or public devices.
- Promptly reporting suspected unauthorized account activity.
11. Security Incident Response
If AutoBooks becomes aware of a security incident affecting customer information, we will investigate the incident, take appropriate corrective actions, and provide notifications where required by applicable law.
12. Policy Updates
This Security Policy may be updated periodically to reflect improvements to our security program or changes in legal or operational requirements.
Material updates will be reflected by revising the Effective Date shown at the top of this document.
13. Contact Us
If you have questions regarding this Security Policy or our security practices, please contact us:
AutoBooks
Email: support@yourdomain.com
Website: https://www.yourdomain.com