Agents can’t act alone
Agents prepare drafts and questions. They can’t approve an entry, send anything to a client, write to a ledger or sign off a close. People do, with their own permissions.
Security
How we protect your clients’ data.
Agents prepare the work. People keep every decision. Here is what keeps the data, and the authority, where it belongs.
Every figure keeps its source
When an agent takes a figure from a document, the words it relied on must appear exactly once and show the same amount or date. Otherwise the figure becomes a question for a person.
Each firm is walled off
Row-level security in the database keeps each firm’s data apart, so one firm’s requests cannot read another’s. Firm administrators decide who works on which clients.
Connections and credentials
Connections are encrypted in transit. Ledger and email credentials are encrypted before they are stored, and are never shown back.
Client files are quarantined
Files clients send stay quarantined until a malware scan clears them and a person at the firm releases them.
Where AI receives data
Krith does not train models on client data, and one firm’s data is never used in another firm’s work. Its AI comes from established providers such as OpenAI, Anthropic and Google, and a provider is turned on only under terms or account settings that exclude training on what it reads. Card, bank account and Social Security numbers and sign-in details are removed from document text and from questions to the assistant before a model sees them; a scanned page that a model reads as an image is sent whole, and file names and the short commands typed into the Work list are sent as written. Settings in the workspace show which AI a firm’s work uses.
Our team sees metadata
By default our staff see states, counts and errors. Seeing client content needs a separate permission and a stated reason, and every access goes into an audit log that cannot be edited.
Where the data lives
Client data, including files, is stored in the United States, in a database hosted on Amazon Web Services. The application runs on Cloudflare’s network. A firm can ask us for the current list of providers that process its data.
Your firm holds the keys
Your firm decides how long client data is kept, can place a legal hold, and can export each close before deleting it. Settings → Security in the workspace shows which services receive your firm’s data.
Privacy noticeA security review to run? Talk to us