Six controls. Zero exceptions.
Every control addresses a real data security risk that accounting firms and businesses face when working with offshore teams.
ISO 27001:2022 certified. End-to-end encrypted. Zero local storage. We built our operating model around eliminating the data security objection, not just addressing it.
Every layer addresses a different vector of risk. Together they meet the security expectations of the most data-sensitive accounting firms and businesses.
Every control addresses a real data security risk that accounting firms and businesses face when working with offshore teams.
From the moment data leaves your firm to the moment work returns, every step is encrypted, monitored, and access-controlled.
Independently audited. Not aligned, certified. Our infrastructure is built to meet the international standard for information security management.
Protection against unauthorised access via VPN, MFA, firewall, and physical access controls.
System uptime and redundancy planning to ensure consistent access for your offshore team member.
Client information protected through NDA obligations, role-based access controls, and encrypted transfer only.
What happens when things go wrong, and how we handle your data at every stage.
Direct answers, no hedging, no marketing language.
Certified. ISO 27001:2022 certification requires an independent external audit by an accredited certification body. We have completed that process. "Aligned" means a company follows the principles without being audited. We use the word certified because it is accurate.
Only your dedicated specialist and the direct management chain responsible for their quality and delivery. Access is role-based and provisioned specifically to your engagement. No other NetBounce staff can access your client data. Access is removed immediately at end of engagement.
Only the platforms your firm specifies, QuickBooks, Xero, Lacerte, Drake, Canopy, or any other tool you use. We do not introduce additional platforms without your approval. All access happens through your credentials provisioned specifically for your team member, through the VPN.
All work devices are company-managed and can be remotely wiped immediately. No client data is stored locally on any device, all work happens within client-controlled platforms accessed through the VPN. A lost device means no data is accessible.
Yes. We welcome security assessments, questionnaires, and due diligence reviews. We can provide our ISO 27001:2022 certificate, documentation of our controls, and answer detailed questions from your IT or compliance team. Contact us to arrange this before your engagement starts.
Our ISO 27001:2022 framework covers the same security domains as AICPA's Trust Services Criteria, security, availability, and confidentiality. We have specifically designed our controls around the security expectations of accounting firms and businesses, informed by direct feedback from our clients.
Schedule a 30-minute discovery call, no commitment. We'll walk through your specific security requirements and answer everything directly.
Schedule a Discovery CallISO 27001:2022 certified operations. NDA before day one. VPN-restricted workstations. Everything you need to staff with security.
