Built for the people who get audited

Expense data is finance data. Every claim below maps to code you can ask us to walk you through — we count it rather than estimate it.

Tenant isolation

Every record belongs to one organization, enforced at the model layer rather than in each query. 20 models carry the tenant scope, so a missing WHERE clause cannot leak another company's data.

  • Scoping is declared on the model, not repeated per query
  • Each entity under a holding company keeps its own departments, budgets and approval chains

Append-only audit trail

Audit records cannot be edited or deleted — the model raises on update, delete and destroy. Approvals, settlements and expense changes write to it from 12 places in the application.

  • Who did what, to which record, and when
  • Deletion is soft (discarded_at); rows are not removed
  • Finance can read the log from the app, not only from the database

Separation of duties

Authorization is decided by 20 policy classes, not by hiding buttons. A statement can only be submitted by the person it belongs to, and is visible to an approver only when it is routed to them or they already acted on it.

  • Managers see their own statements plus the ones routed to them — not the whole department
  • Company-wide visibility is limited to Finance and Owner roles

Locked after submission

Submitting a statement locks it and every expense inside it. Values stop being editable at the moment they enter the approval chain; returning it to draft is itself a recorded action.

  • No silent edits between submission and approval
  • Returning a statement unlocks it explicitly and leaves a record

Hosting & backups

Runs on dedicated infrastructure in the United States. Receipt images are stored in object storage in the US West region, and the database streams continuously to backup rather than relying on nightly dumps.

  • Passwords are stored as bcrypt hashes, never in plain text
  • Access to the application requires an account; there is no public data surface

What we don't claim

Claimbook implements a SOX-style audit trail. It has not been through an external SOC 2 or SOX audit, and we don't describe it as certified. If your auditor needs evidence, we will walk them through the controls and the log.

Ask us about your audit requirements

Setup is included — we configure your approval chain before your team logs in.

Talk to us