Question 1

Is every change to a record tracked?

Accepted Answer

Yes. The audit trail records the signed-in user, the page, the record, the field and the old and new value for every manual edit, and who approved a held change.

Question 2

How is our data separated from other clients?

Accepted Answer

Each client runs as its own deployment with its own database and document store. Access to that deployment is granted user by user in your own Microsoft tenant; nobody from another client can be provisioned into it.

Question 3

Which certifications cover the hosting?

Accepted Answer

Tributom One runs on Microsoft Azure in the UK South region. Microsoft Azure is certified to ISO/IEC 27001 and audited under SOC 2 Type 2 by independent auditors; the certificates and reports are published on Microsoft's Service Trust Portal. These cover Microsoft's infrastructure; the controls Tributom operates on top of it are described on this page.

Question 4

Where does the AI run?

Accepted Answer

Transaction categorisation and document assistance run on a private language model on infrastructure Tributom controls, reached over an authenticated tunnel. No client data is sent to a public model provider.

Question 5

Which connections are used for banking and accounting?

Accepted Answer

Bank connections use Open Banking through regulated aggregators; accounting exports use each system's authenticated API (Xero, FreeAgent, Sage Intacct, Oracle GL).

Built for the scrutiny private wealth data deserves.

Built for the scrutiny private wealth data deserves

Microsoft Entra ID sign-in

One database per client

Roles by module

Maker-checker

Field-level audit trail

Hosted on Microsoft Azure, UK South

Frequently asked questions

Ask us anything about how we handle your data.