Security
It can't touch your money
Midbench connects to your accounts with read-only access. It can see transactions, invoices, bills, and payroll summaries; it cannot send payments, move funds, or change anything at your bank or providers. Even in the worst case, a read-only connection can't move money.
Your logins stay locked away
You enter each provider login once, on a dedicated secure page. It's encrypted immediately, stored only in encrypted form, and never displayed back to anyone again — including the people who build Midbench. The system can use it to read your data; no person can read it.
How you sign in
If you take up a Midbench account, you sign in with a passkey — the phishing-resistant standard built into your phone or computer — on our identity provider's pages. No password is required, Midbench's own servers never see or store a sign-in credential, and your account opens exactly one business's books through a recorded authorization we can revoke server-side the moment you ask. Every request your AI client makes is re-checked against that authorization — revoking it takes effect immediately, not when a token happens to expire.
You stay in control
Disconnect any provider at Midbench — or revoke its access at the provider itself — and reading stops immediately. Your books are yours: you can export your records whenever you like.
Every number is computed, not remembered
Midbench doesn't keep separate running totals that could quietly drift away from the record. Every figure you see — a balance, a monthly statement, the answer to a question — is produced, on demand, from the full recorded history. That's why any number can show exactly where it came from, and why a statement re-produces exactly, years later.
Your books can't be quietly rewritten
Nothing in Midbench is ever edited in place: corrections are new entries, made in the open. When a month closes, its statements lock and stay exactly as issued — and Midbench re-checks its own records on a schedule to prove nothing has drifted. If your bank, your investors, or the IRS ever ask whether you can stand behind your numbers, the answer is built in.