Passwords & Secondary Security – How We Protect Your Access and Data

Secure Password Management with 1Password

We use 1Password, a trusted and highly secure password management platform, to store all of our logins and credentials. This ensures:

• Centralized storage: All passwords are kept in one secure vault, rather than scattered across systems.
• Encryption: Data is encrypted end-to-end. They are only accessible when the system needs to authenticate.
• Automated integration: Our Insight system communicates directly with 1Password. This means your data is pulled securely, without manual handling of credentials.
• Audit protection: Because our team cannot see or share the stored information, the risk of exposure through human error is minimized.

How the Insight–1Password Integration Works

When you provide login credentials, you enter them directly into our Insight system. From there:

• Encrypted transfer only: Insight passes your credentials directly to 1Password, where they are stored in a secure, encrypted vault.
• No storage in Insight: The data is never stored in Insight itself. Insight simply acts as a secure bridge to 1Password.
• No employee access: Because of this integration, BKE team members cannot see or retrieve your raw passwords. They are only accessed automatically when needed by the system.
• End-to-end encryption: At every step — from your entry into Insight to the vault in 1Password — the data is encrypted and protected.

This design ensures that you remain in control of your credentials, while we maintain the ability to securely connect to the accounts necessary to deliver bookkeeping services.

Secondary Security & Access Controls

In addition to password protection, we use multiple layers of security to ensure your data stays safe:

• Multi-Factor Authentication (MFA): Access to critical systems requires verification through a second factor (such as a secure code or authentication app).
• Role-Based Permissions: Employees only have access to the tools and accounts necessary for their work.
• Automatic Session Timeouts: Inactive sessions close automatically to reduce risk of unauthorized access.
• Monitoring & Alerts: Our systems are monitored for unusual login attempts or suspicious activity.

Why This Matters for You

By leveraging a system like 1Password alongside strict secondary security measures, we protect your access in two ways:

1. Reducing human exposure – Our team never directly handles your passwords.
2. Ensuring controlled access – Only the right people, at the right time, with the right permissions, can access your data.

The result is a secure, efficient, and fully compliant process that safeguards your financial information while allowing us to work quickly and accurately on your behalf.