Ccount is designed to separate company workspaces and protect account access.
Ccount application records are associated with a company account, and normal bookkeeping queries are designed to be scoped to the signed-in company tenant.
Passwords are stored using PHP password hashing. Forgot-password requests use the user's registered email address and time-limited reset tokens stored in hashed form.
HTTPS should remain enabled across both ccount.co and login-a.ccount.co. The service is deployed on hosting infrastructure operated by third-party providers and is subject to the security and availability of that infrastructure.
Customers should use unique passwords, restrict user access to appropriate staff, remove users who no longer require access, and keep exported bookkeeping files secure.
Realistic examples of invoicing, team collaboration and business reporting. Screen content is illustrative and reflects Ccount's recordkeeping functions.
