Finance ops without spreadsheet gymnastics.
Vendor management, approval chains, cost centers, RBAC. Built for finance teams that need accountability without surrendering control to a vendor.
Roles + permissions that match real org structures.
Define per-role permissions: who can approve, who can view, who can export. Owner / Admin / Approver / Member / Read-only by default; custom roles for matrixed orgs.
- ✓Per-role permissions on every action
- ✓Custom roles for matrixed organizations
- ✓Audit log of every permission grant + change
| View | Edit | Approve | |
|---|---|---|---|
| Owner | ✓ | ✓ | ✓ |
| Admin | ✓ | ✓ | ✓ |
| Approver | ✓ | — | ✓ |
| Member | ✓ | — | — |
| Read-only | ✓ | — | — |
Vendor management + approval chains per cost center.
Configure approval chains per cost center (Engineering / Marketing / Operations). Spending thresholds route to the right approver. Vendor management surfaces consolidated relationships across the org.
- ✓Per-cost-center approval chains
- ✓Vendor consolidation across the org
- ✓Spending caps with auto-route to approver
- 📂 Engineering
- └─ R&D· 4 approvers
- └─ Infrastructure· 2 approvers
- 📂 Marketing
- └─ Brand· 1 approver
- └─ Performance· 1 approver
- 📂 Operations· 2 approvers
GDPR by default, with the paperwork honestly staged.
GDPR-aligned by default, with an append-only audit log and export or deletion of your data on demand. The DPA pack and processing records are prepared for public beta — they are not in the admin panel today.
- ✓GDPR-aligned per default — no toggle to flip
- ✓Append-only audit log — file export not built yet
- ✓Privacy Policy + processor list published on the trust page
- 📄 Data Processing Agreement↓ PDF
- 📄 Privacy Policy↓ PDF
- 📄 Processing Records↓ CSV
- 📄 Audit Log Q3 2026↓ PDF
Beyond the basics.
Capabilities that activate once you cross from free into a paid tier — or when you opt in.
- RBAC + custom roles
Define your own roles beyond the 5 defaults. Per-permission grants, role inheritance, audit of every change.
- Compliance bundle
GDPR audit log + DPA + Privacy Policy + Data Processing Records — everything legal asks for, exportable on demand.
- Cost-center org tree
Matrix org structures with multi-level cost centers, parent-child relationships, and roll-up reporting.
Frequently asked.
- How many seats are included?
- Seat counts and per-seat pricing are set when paid tiers ship — we are not publishing a number we cannot yet hold ourselves to.
- Where does our data live?
- On EU-region cloud — dedicated Frankfurt infrastructure. Processors are listed in full on our trust page, with what each one receives; a data-processing agreement is in place with each. GDPR by default; you can export or delete your data on demand.
- Is there a DPA / GDPR documentation?
- The Privacy Policy and the full processor list — with what each processor receives — are published on our trust page. Data export and deletion work on demand today. The signed DPA pack and processing records are prepared for public beta; they are not downloadable from the admin panel yet, and we are not going to imply otherwise.
- What about SSO + SCIM?
- Not scheduled. We have designed the seam for an external identity provider, but no integration is planned until a concrete partnership exists — so we are not going to put a release on it. Tell us if you need it; a named customer is what would move it.
Ready to organize your finances?
Free to start. No credit card. Open the demo workspace in a single click.