How we protect your data
Every request is checked, and only ever reaches your own company's data.
Checked on every request
Every page and every action checks that you're signed in, at the point where your data is read, not just when you arrive. Your company is worked out from your signed-in session and your access to it, never from anything the browser sends.
Separate from every other customer
Before any record is used, Ask Lou confirms it belongs to the company you're working in. Within your company, roles decide who can see and change what.
Our staff
Our team can view your company to help you, and some of our staff can make changes to your company's information in Ask Lou. We only make changes when you ask us for help, and our team is trained on that rule. Every time any of our staff opens a customer's company, it's written to an audit log, and who has access is reviewed every quarter.
Your books stay in your accounting system
Ask Lou reads from your accounting system and never writes back to it. Nobody can change your accounting records from Ask Lou, our team or yours. To correct something in your books, correct it in your accounting system, and the change comes into Ask Lou with your next import.
Encrypted and retained only as long as needed
Your data is encrypted in transit and at rest. Lou conversations are deleted 90 days after their last activity, and other records follow the retention periods in the Security Overview.
- 1You sign in
With multi-factor authentication, every time. We never handle your password.
- 2Your session is checked
On every page and every action, where the data is read, not just at the door.
- 3Your company is resolved
From your verified session and your access to it, never from what the browser sends.
- 4Only your company's data
Every record is confirmed to belong to your company before it's used.
- 5Logged and encrypted
Encrypted in transit and at rest. Any staff access to your company is written to an audit log.