Strong authentication
Sign-in is owned by the Varza identity service. The website never stores a second copy of your credentials.
Built for financial data, described in concrete terms.
We describe what the platform does rather than making absolute claims. Where a capability is staged, the product pages say so.
How the platform is built
Multi-factor authentication
MFA enrolment, challenge and recovery are handled by the identity service with policy-driven enforcement.
Tenant isolation
Every query is scoped to a tenant. The public website has no access path into tenant financial data.
Permission-based access
Roles and permissions gate every module, report and action — including anything Varza Ⅰ can reach.
Encryption in transit
All traffic is served over TLS with strict transport security and modern response headers.
Secure session design
Sessions are short-lived and revocable, with device visibility and explicit sign-out everywhere.
Audit trails
Financial documents and approvals carry a history of who did what, and when, where the module implements it.
Controlled AI access
Varza Ⅰ reads only what the signed-in user is already permitted to read, and cannot post without approval.
Reporting a security concern
No system is “100% secure”. If you believe you have found a vulnerability, tell us before disclosing it publicly and we will respond. Please include what you did, what you observed and anything needed to reproduce it.
Security contact: security@varzaone.com
See it against your own numbers.
Create a workspace, import a chart of accounts and post a document. The ledger underneath is the same one that will carry you at ten times the size.