Snapshot 217876

Document
Security page
URL
https://www.rillet.com/product/security-and-permissions
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
204054 bytes
SHA-256 (raw)
8120195a75c0ed56fdfaddcd53c7f88bfa0fd9ba8f828e84b03309adabd3f187
SHA-256 (normalized text)
af049c293abf284dd26ecf9720248732ae01e75c26fa43b4a063d76f3db23f9e

Normalized text

Scripts and page chrome removed; this is what change detection compares.


SOC 1 & SOC 2 Type II
Annual third-party audits. Reports available for review.

Industry-leading encryption
AES-256 at rest. TLS 1.2+ in transit. Hosted on AWS.

Continuous monitoring
Automated monitoring with real-time alerts and pen tests.

GDPR committed
Aligned with international privacy expectations for global teams.

Logical data segregation
Customer data is logically separated. Every access logged.

Enterprise SSO
Google, Microsoft, and Rippling. Plus magic-link login.
The right people see the right data.
Rillet enforces segregation of duties, view-only stakeholder access, and configurable approval workflows so the team can move fast without losing control.
Role-based access, no seat limits
Three-tier roles: Owner, Admin, Accountant, plus view-only
SSO via Google, Microsoft Entra, or Rippling
Permission changes take effect immediately, with full audit history
Approval workflows that catch what matters
Tier approvals to materiality (e.g., $50K to Controller, $500K to CFO)
Routes journal entries, sync events, and AI agent proposals
Every approval and rejection logged immutably for audit
View-only access
Investors, board, and cross-functional partners self-serve metrics
Frees the accounting team from being a human export tool
Every read access is logged, with full attribution
Period locking and subledger controls
Lock closed periods to prevent unauthorized changes
Granular subledger locks by entity for staged multi-entity close
Every lock and unlock logged with reason and timestamp
‍
Six commitments behind every AI action.
Rillet's Aura agents operate inside a controls framework designed for SOX, ICFR, and external audit. These aren't policies bolted on. They're how the product is built.
01
Propose & Approve
Every agent action is proposed to a human. Nothing posts without approval.
02
Full Audit Trail
Every query, proposal, approval, and rejection logged with timestamp and reasoning.
03
Domain-Specialized
Each Aura agent is scoped to one accounting workflow. Purpose-built. Not a chatbot.
04
Materiality-Tiered
Configurable thresholds tie human checkpoints to dollar value. Documented and testable.
05
Segregation of Duties
Agents prepare. Humans authorize. Role-based access enforced for AI, just like your team.
06
Model Change Mgmt
Model swaps flow through ITGCs. Testing, approval, rollback. SOX 404 applies.
Certifications & compliance
Independently audited. Continuously monitored.
Rillet maintains the certifications enterprise finance teams expect, with annual third-party validation.
Explore more Rillet features
Request a demo

Request a demo

Continuous Close ledger
AI-native close architecture
Request a demo

Advanced revenue recognition
Complex revenue models
Request a demo

Aura AI
AI that acts on your live ledger
Request a demo

Accounts receivable
Automated invoicing & contract management
Request a demo

Multi-entity accounting
Multi-currency and intercompany
Request a demo

Accounts payable
Auto-categorization & expense recognition
Request a demo

Flexible GAAP reporting
Customized reports for any audience
Request a demo

Bank reconciliation
Transactions auto-matched in seconds
Request a demo

Real-time reporting
Investor-ready metrics & executive P&L
Request a demo
