The AI never owns your books.
Invoices carry names, addresses, tax numbers, prices and bank details. Ledgers carry suppliers and staff. We hold them as your processor, in your region, and we let a model see as little of them as the job needs.
Read first, write never without you
Connections are read-only by default. The system's own account can draft entries and attach documents; it cannot post, delete, pay or file. Those need a named person, and they are logged before they happen.
One area per client
Every client is a logically isolated tenant with its own storage, its own intake address and its own access grants. A firm sees only what each client grants; the client can revoke it and export everything.
In your region, encrypted
EU region for European customers, ASEAN region for Malaysia, the Philippines and Singapore, regional hosting elsewhere as waves open. Encrypted at rest and in transit; daily encrypted backups, restore rehearsed.
Models see fields, not ledgers
A document goes to a model one at a time, after names, bank details and unnecessary personal data are removed. Sales totals never go to a model. Providers are on business terms with no training on your data and zero retention.
Rules decide, and say why
Every finding and every draft cites the rule version and the evidence it used. An auditor or an inspector can follow it. Uncertain items become questions, never silent changes.
Everything is logged
An immutable audit trail of who saw, approved, posted, exported or filed what, and when. Retention and deletion per client; working copies deleted after 90 days, the evidence copy kept with the books.
A different law in every region, one set of controls
| Region | Law | Hosting | What we do |
|---|---|---|---|
| EU and EEA | GDPR; national tax-secrecy rules for advisers | EU region | Processor agreement, sub-processor register, impact assessment for the extraction service |
| United Kingdom | UK GDPR, Data Protection Act 2018 | EU region under the UK addendum | UK adequacy with the EU |
| Malaysia | PDPA 2010, amended 2024 | Singapore or Malaysian region | Contract clauses; a firm sees only what the client grants |
| Philippines | Data Privacy Act 2012 | ASEAN region | Registration with the NPC where required |
| Singapore | PDPA 2012 | ASEAN region | Transfer limitation met by comparable protection |
| China | PIPL, Data Security Law | No mainland hosting | Chinese sellers' European data stays in Europe; no domestic Chinese product |
| Australia, Canada, US, Gulf | Privacy Act, PIPEDA and Law 25, state laws, PDPL | Regional, as each wave opens | Accountability for offshore disclosure; accredited partners where the regime demands |
The regulatory line
Preparing returns for third parties is reserved to licensed professionals in Germany, Belgium and elsewhere. Software that the taxpayer or its adviser operates is permitted, and that is what we are. Direct filing means the customer submits through the authority's own interface with our software. Filing as a service stays with licensed partners.
Findings are assurance for review by you or your adviser. They are not tax advice.
For clients of an accounting firm
If your accountant uses Rightbooked for your books, there is a plain-language page written for you: what we collect, what we never collect, who can see it and how to ask for deletion. For a clinic, that includes the promise that no patient information is ever requested or kept.
How we handle your information →A processor agreement and a sub-processor list are available to any customer on request: info@rightbooked.com.