Ekue
Every business is walled off in the database
Many products keep customers apart with checks in their application code, where one missed check can show one business another's data. Ekue enforces it inside the database itself, with Postgres row-level security: every request can only read and write the rows of the business it was opened for. An automated test walks every table to prove one business cannot see another's rows.
Signing in
- Two-factor sign-in with an authenticator app, with recovery codes for when you lose your phone.
- Passkeys, so you can sign in with your fingerprint or face instead of a password.
- Sign in with Google or Microsoft, if you prefer.
- Accounts lock after repeated wrong passwords, and every sign-in endpoint is rate-limited.
- Your session token lives only in the browser's memory, and the cookie that renews it can't be read by scripts on the page.
Sensitive details are encrypted
Your business's EIN or SSN, your vendors' tax IDs, two-factor secrets and payment keys are encrypted before they are stored. Ekue shows a tax ID only by its last four digits.
Your files are private
Receipts and bills you upload are checked for what they really are, capped in size, and stripped of hidden metadata such as a photo's location. They are kept in private storage and opened through links that expire within minutes.
Card payments never touch Ekue
When a customer pays an invoice, the charge happens on your own Stripe account. Card numbers go to Stripe, not to us, and the money goes straight to you.
Who can see your books
- You decide who joins your business, as an Owner, Editor or Viewer, and what each can see area by area.
- If you ask our support to look at a problem, any visit to your account is recorded in an audit trail that cannot be edited.
- If you turn on receipt reading, the documents you choose to read are sent to Anthropic's Claude to fill in the form. You can turn it off for your business under Settings; then nothing is sent.
Report a problem
If you think you've found a security issue, email support at ekue.com with "Security report" in the subject. Please give us a chance to fix it before telling anyone else.