Multi-factor authentication
Sign-in supports multi-factor authentication, and an organisation can require it of everyone. Sensitive actions, such as creating API keys or configuring webhooks, ask for it again at the moment they happen.
Security
Protecting your books, and showing you what happened to them
Kumry keeps your organisation's data behind strong sign-in and role checks, and records who changed what so you can see it for yourself. Here are the controls in place today.
Controls in place
Organisation isolation
Each request is tied to one organisation and checked against that person’s role in it. Owners, admins, editors and viewers see and do different things.
Encryption in transit
Kumry is served over HTTPS. Connections between your browser and Kumry, and from Kumry to your webhook endpoints, use TLS.
Linked ledger history
Each posted entry carries a fingerprint of the one before it, so a change to an earlier entry would break the link and show up.
Approval trail
Each posting records who approved it and when, and the audit history shows who did what in the organisation.
Signed certificates
Migration certificates are digitally signed (Ed25519) when Kumry issues them.
Careful credential handling
API keys are stored only as hashes and shown once. Webhook signing secrets are kept encrypted, and every webhook delivery is signed so your endpoint can check it came from Kumry.
Scanned documents
Documents uploaded to Kumry are virus-scanned, and files that fail the scan are held back rather than stored with your records.
What the linked history and signatures tell you
They show that records and certificates have not been altered since they were written or signed. They do not show that the underlying accounting choices were right, which is why the approval trail and your accountant's review still matter.
Read how verification works →Responsible disclosure
Found a vulnerability? Please report it privately to support@kumry.com. Include enough to reproduce the issue, and leave out customer data, secrets or exploit material beyond that.