Financial data is the most sensitive thing a business has, and the question of who can see it comes up early. Here's what we can tell you.

Clockwork is SOC 2 Type 2 certified. Type 2 means our controls were audited over a period of time in live operation, not just documented at a point in time.

When you connect QuickBooks Online, QuickBooks Desktop or Xero, Clockwork takes read-only access to your accounting data. We read your ledger to build your model and forecast; we do not write back to your books, and we cannot change your accounting records.

Clockwork does not connect to your bank accounts. Everything we forecast is built from the accounting data you connect, or from a spreadsheet you import.

Your data is encrypted in transit and at rest, and it is never shared with third parties.

You control which company files are connected and who is invited into them. Plans are billed per company rather than per seat, so adding the right people doesn't cost extra — you can give each person access to the companies they should see.

If you have specific requirements — a security questionnaire, a data processing agreement, single sign-on, or a question about retention or sub-processors — those are best answered directly rather than from a help article. Book a time with our team and we'll get you the right answer, or send us a message in the chat and we'll route it to someone who can.