Enterprise-grade security
Your books are your business
-
SOC 2 Type II
Independently audited security controls
-
AES-256 + TLS
Encrypted at rest and in transit
-
US hosting
All customer data hosted in the United States
-
No model training
Your firm’s data is excluded by default
| Control | What it means | Status |
|---|---|---|
| Data protection | ||
| SOC 2 Type II | Independently audited security controls | |
| Data encryption | AES-256 encryption at rest and TLS in transit | |
| US hosting | All customer data hosted in the United States | |
| No credential sharing | Connect accounts without sharing your credentials with Kick | |
| AI controls | ||
| No model training | Your firm’s data is not used for model training by default | |
| Tool permissions | Choose read-only access or allow supported changes | |
| No data sales | We do not sell your financial data | |
| Traceability | Audit and understand AI actions | |
| Access governance | ||
| Role permissions | Choose who can view or edit your books | |
| Entity access | Give team members access to specific businesses | |
| Passwordless | Sign in without a password | |
| Google SSO | Sign in with your Google account | |
| Accounting controls | ||
| Activity log | Review transaction and journal entry changes | |
| Undo changes | Review and undo changes to your books | |
| Period locks | Restrict changes to closed periods by business | |
| Linked reversals | Trace reversing journal entries back to their original entries | |
Questions & answers
Is Kick SOC 2 Type II compliant?
Kick’s security controls are independently audited through a SOC 2 Type II examination. Visit our Trust Center for security information and documentation.
Is my data used to train AI models?
Your firm’s data is excluded from AI model training by default. Kick’s AI Terms permit training if you opt into Data Sharing. You can manage this choice in your account settings.
Can I request deletion of my information?
Email privacy@kick.co to request deletion of your personal information. Some information may be retained for legal obligations or other purposes described in our Privacy Policy, including limited backup retention.
Where can I ask additional security questions?
Visit our Trust Center. Our Privacy Policy and AI Terms explain data use, sharing and retention.
Can I review or change the rules behind automated categorization?
Yes. You can inspect, edit and add categorization rules, including rules generated by AI.
Can we complete a security review before adopting Kick?
Visit our Trust Center to review Kick’s security information and ask questions about your firm’s requirements or request additional documentation.