# Security and privacy

> How OneBooks protects your books — isolation between businesses, roles and permissions, sessions, audit trail, integrations and AI safeguards.

Canonical: https://docs.getonebooks.com/reference/security-privacy/
Language: en
Documentation index: https://docs.getonebooks.com/llms.txt

## Your business is isolated

Every record in OneBooks belongs to exactly one business and every request is checked against the business you are signed into. Users, connected apps and AI agents can only reach the business they were granted access to.

## Sign-in and sessions

- Email and password (verified email required) or Google sign-in.
- Sessions expire; **Keep me signed in** extends them on trusted devices. Sign-in is rate-limited against guessing.
- Password resets are sent only to the account's verified address.

## Roles and permissions

Owner, Admin, Member and Viewer, plus per-user grants and revokes. The same permission set gates the app, the API, the AI assistant and connected apps. See [Users, roles and permissions](https://docs.getonebooks.com/settings/users-roles/).

## Audit trail

Posted journal lines are never edited or deleted — corrections are new reversing entries, and every document keeps its number after voiding. Locked fiscal years block changes to closed periods.

## Integrations

Third-party apps connect over OAuth 2.0 with the scopes you approve and can be revoked at any time. POS tokens are stored encrypted. Webhooks from POS providers are signature-verified.

## AI

Tool results and uploaded documents are treated as data, not instructions; every write requires a human confirmation; no destructive actions are exposed to AI. See [Safety, privacy and limits](https://docs.getonebooks.com/ai/safety/).

## Saudi e-invoicing

Signing keys for ZATCA devices are generated server-side and stored encrypted; production secrets are protected with a dedicated key. Invoice hashes chain each document to the previous one, as ZATCA requires.

## Your data

You can export everything at any time. Deleting a conversation removes only the chat; documents stay. For data requests or deletion of an account, contact support — see [Get support](https://docs.getonebooks.com/reference/get-support/).