Security · Trust

Drafts in your books. Posts only what you sign.

Sieve drafts; your people approve. Every action is logged with a name and a time, and your auditor can see all of it.

SOC 2 report

TYPE II

Period Oct 1, 2025 – Sep 30, 2026 · no exceptions noted

Report available under NDA

[ Access ]

Sieve reads your books and writes drafts.

It cannot move money,

and it cannot approve its own work.

[ Controls ]

Six controls,

tested every quarter.

Hover a control to read how it works. Your auditor gets the same list, with evidence.

[ Controls ]

Six controls,

tested every quarter.

Hover a control to read how it works. Your auditor gets the same list, with evidence.

01

Maker-checker on every entry

SOX · SoD

The agent that prepares an entry can never approve it. Approval needs a named person with the reviewer role.

01

Maker-checker on every entry

SOX · SoD

The agent that prepares an entry can never approve it. Approval needs a named person with the reviewer role.

02

Separation of duties

SoD · roles

Preparer, reviewer and controller roles are set per entity; one person cannot hold two roles on the same entry.

02

Separation of duties

SoD · roles

Preparer, reviewer and controller roles are set per entity; one person cannot hold two roles on the same entry.

03

Immutable audit log

Log · export

Every draft, edit, approval and lock is written once, with a name and a time, and exported to your auditor as is.

03

Immutable audit log

Log · export

Every draft, edit, approval and lock is written once, with a name and a time, and exported to your auditor as is.

04

Encryption at rest and in transit

AES-256 · TLS 1.3

Ledger data is encrypted with per-customer keys; nothing is used to train models.

04

Encryption at rest and in transit

AES-256 · TLS 1.3

Ledger data is encrypted with per-customer keys; nothing is used to train models.

05

SSO and SAML

Okta · Entra ID

Sign-in goes through your identity provider, with SCIM provisioning and session limits.

05

SSO and SAML

Okta · Entra ID

Sign-in goes through your identity provider, with SCIM provisioning and session limits.

06

Data residency

US · EU

Choose where your ledger data lives. Backups stay in the same region.

06

Data residency

US · EU

Choose where your ledger data lives. Backups stay in the same region.

[ PBC room ]

Your auditor asks.

The evidence is already signed.

Prepared-by-client requests fill themselves from the close: recs, schedules and approvals, each with its signer.

[ PBC room ]

Your auditor asks.

The evidence is already signed.

Prepared-by-client requests fill themselves from the close: recs, schedules and approvals, each with its signer.

Bank recs, all accounts, Jul–Oct

Requested by auditor · Nov 12

48 files · signed

Requested

Accrual support over $25K

Requested by auditor · Nov 12

17 entries · evidence attached

Requested

Intercompany eliminations, FY26

Requested by auditor · Nov 13

72 JEs · FX rates

Requested

Journal entries after period lock

Requested by auditor · Nov 13

0 entries · lock log

Requested

User access review, Q4

Requested by auditor · Nov 14

11 users · roles export

Requested

Create a free website with Framer, the website builder loved by startups, designers and agencies.