BOOKSAI SECURITY AND COMPLIANCE OVERVIEW
A product of SumPulse Software Inc.
September 2026 | Customer-facing overview

OUR APPROACH
BooksAI supports accounting work with workspace permissions, source review, configured booking rules and activity records. These controls work alongside the customer’s own accounting process and access management.

CUSTOMER CONTROLS
- Workspace and company access: assign appropriate roles and review access as responsibilities change.
- Review and booking rules: review prepared work and set boundaries for eligible automatic bookings. Monitor exceptions.
- Protected connections and credentials: use authorized setup, encrypted transport and protection of sensitive credentials. Do not send keys in chat.
- Activity history: inspect approval and posting activity to help understand who acted and what happened.
- Preparation checks: source review, total checks and duplicate indicators help identify issues; they do not eliminate every error.
- AI choices: use approved managed access or a supported provider API key. Review learning and usage settings. Broader model-training participation is not enabled by default.

ASSURANCE STATUS
SumPulse Software Inc.’s security and compliance program is in progress. Independent certifications and attestations have not yet been completed. We do not claim SOC 2 attestation or ISO 27001 certification. Product controls do not themselves establish a customer’s regulatory compliance.

DATA AND CONNECTIONS
Relevant accounting or document context may be processed by configured AI and service providers. Messaging destinations and spreadsheet exports can create copies outside BooksAI. Review the privacy notice, provider terms and data-processing overview. Specific residency, retention, regulated-data and contractual requirements should be discussed before onboarding and confirmed in writing.

CUSTOMER RESPONSIBILITIES
Connect only authorized companies and data. Protect sign-in accounts, limit permissions, review source information and AI-prepared results, and keep company guidance current. Remove access for departing users, review third-party connections and request assistance with export or deletion when leaving.

LIMITATIONS
No online service can eliminate every security risk or guarantee that all AI output is correct. Pilot and planned features may not be generally available. A provider’s certification is not certification of BooksAI. This document is informational and is not an executed security agreement, DPA or independent assurance report.

CONTACT
For security, privacy or procurement questions, contact SumPulse Software Inc. at Krishna@booksai.io. Initially describe your concern without sending passwords, API keys or sensitive customer records. Additional due-diligence information can be discussed privately where appropriate.