Your money and data stay yours
You are trusting us with the most sensitive information in your business. Here is exactly how we protect it, written in plain language and backed by your engagement letter.
How supplier payments work
When we help with payments, the money only ever moves when you say so, from your own bank, with your own code.
How we protect your data
Access control
Two-factor login on every systemIndividual staff accounts, never sharedAccess only to the clients each person servesDocument sharing
Secure links that expireNo financial records as email attachmentsEvery document filed against its transactionOur people
Confidentiality agreements for all staffSecurity training from day oneAccess removed the day someone leavesSoftware and storage
Reputable cloud accounting providersSubscriptions in your name where possibleNo local copies of client recordsRecords and audit trail
Every change logged with who and whenOriginal documents kept, never overwrittenYour full records handed over if you leaveMonitoring and response
A password manager for all credentialsUnusual activity reviewed and acted onA written plan if something goes wrongIf you insist on sharing a login
We strongly prefer view-only access or statements. If a client still wants to share a banking login, we only accept it under these conditions:
How you can help
Most fraud starts with a convincing message. A few habits keep your business safe.
Privacy, in short
A summary of how we handle personal information. The full privacy policy is available on request. [Link full policy once drafted.]
Business records needed to keep your books and prepare returns, contact details for you and your team, and payroll details for your employees where you use our payroll service.
Only to deliver the services in your engagement letter and to meet our own legal obligations. We never sell your information or use it for unrelated marketing.
The BesTally staff working on your account, using individual logins. Suppliers such as accounting software providers process data on our behalf under their own security terms.
For as long as you are a client and then for the period the law requires for accounting records. [Confirm retention period.]
You can ask to see, correct or receive a copy of the personal information we hold about you. Contact us and we will respond promptly. [Confirm obligations under the Cyber and Data Protection Act with POTRAZ.]
We will tell affected clients quickly, explain what happened and what we are doing about it, and report it to the authorities where required. [Set notification timeframe.]
Something look wrong?
If you see a message, payment or login you do not recognise, contact us straight away. Security concerns go to the front of the queue.