Your money goes to your accounts. Your keys stay encrypted.
ReckonOS never holds client money: clients pay through payment accounts you own. Gateway and email credentials are encrypted at rest with AES-256-GCM and masked to their last four characters. Sign-in supports a second step with an authenticator app, and changes to invoices, payments and settings are written to an audit log.
Money
Agency-owned payment accounts
Client invoices settle only through your own Stripe, Paystack, PayPal or other gateway account. ReckonOS’s own payment accounts are used only to bill your ReckonOS subscription.
No card data
Card details are entered on the payment provider’s hosted page. ReckonOS never receives or stores a card number.
Checked payment notifications
When a gateway reports a payment, ReckonOS checks the notification’s signature, makes sure it belongs to your workspace and invoice, and records it once, ignoring repeats.
Whole-number money
Amounts are stored as integer minor units (cents, pence, kobo) with their currency, so totals do not drift from floating-point rounding.
Access and credentials
Encrypted credentials
Gateway keys and email (SMTP) passwords are encrypted at rest with AES-256-GCM. Contractor tax IDs collected on W-9s are encrypted the same way.
Masked after saving
Once saved, a key is shown only as its last four characters. To change it, you enter a new one.
Two-step sign-in
Turn on a second step with any authenticator app, with one-time recovery codes. Repeated failed sign-ins lock the account for 15 minutes.
Roles and sessions
Each teammate has a role, and each workspace’s data is kept to that workspace. Changing a password or role, or removing someone, ends their sessions straight away.
An audit log of what changed
ReckonOS records who changed what, and when, including:
- Invoices created, sent, updated or voided, and late fees applied
- Payments recorded, from a gateway or by hand
- Gateway and email credentials changed or cleared
- Workspace and tax settings changed
- Teammates invited, changed or removed
- Sign-ins, password changes and two-step sign-in turned on or off
- Plan changes and cancellations
- Data exports requested and downloaded, and workspace or account deletion requested or undone
Email that looks like it came from you
On Pro and Studio, ReckonOS sends invoices from your own email domain and checks its SPF, DKIM and DMARC records, so you can see and fix what inbox providers look at before you send. Passing those checks removes the most common reasons mail is rejected; no one can promise inbox placement.
Receipts
Receipt images are read by an OCR engine running on ReckonOS’s own servers, not sent to an outside scanning service.
Report a security issue
Email [email protected] with “Security” in the subject. Please give us a chance to fix the issue before you share it.
Security questions
Does ReckonOS hold my clients’ money?
No. Client payments go through payment accounts you own, with your own keys, and settle in those accounts. ReckonOS records the payment; it never receives or forwards the money.
Does ReckonOS store card numbers?
No. Card payments happen on your payment provider’s hosted page, and your ReckonOS subscription is paid through a hosted checkout. ReckonOS never sees or stores a card number.
Can ReckonOS staff see my gateway keys?
Keys are stored encrypted with AES-256-GCM, and no screen shows a saved key again, only its last four characters. The key that decrypts them is held only in the production server configuration: the ReckonOS application uses it to call your gateway, and the people who administer the production servers (today, the founder) could use it. Every change to your keys is written to your audit log.
What happens to my data if I stop paying?
Your workspace becomes read-only. You can still open your records and download all of them from Settings > Data; you just cannot create new ones until you choose a plan. To have everything removed, delete the workspace there: it is erased 30 days later unless you undo it.
Connect your own gateway. Keep your own money.
Set up your workspace, add your logo and send an invoice in your own template. Every feature is open during the trial.
$7 today for 7 days of full access. On day 7 Pro starts at $99 a month (or $948 a year) unless you cancel first. Cancel any time from Settings > Billing. VAT or sales tax may be added at checkout.