Records that answer for you.

Every business record in NuAi carries the identity of the business it belongs to. Row-level security is switched on for every table that holds your records (246 of 246, counted 31 October 2026), and the functions that act on a business's behalf check the same identity inside the database. The separation is not a filter in the app that someone could forget to apply: it is enforced beneath the app, where the records live. Signed in to your business, you simply never see another business's records.

Groups are the deliberate exception: a head office that owns its branches can read its own branches from one console. That sharing is switched on per group, at the group's request, never by default, and whether the branches share one membership is a second switch, also off until the group asks NuAi to turn it on.

An entry whose debits do not equal its credits is refused by the database itself, whichever screen tried to write it. Close the financial year and every entry in it locks; it reopens only with a reason that stays on the record.

Mistakes are recorded, not erased: a voided sale stays on the books, marked void, with who voided it and when, and every change to an expense, a journal or the chart of accounts is on an audit trail with the values before and after.

A slip can only be claimed once. A photographed supplier slip gets one identity from the numbers that make it unique (receipt and authorisation numbers, the merchant, the time and the date), and the file itself is fingerprinted. Present the same slip again, even days later, and the database refuses it before it posts; a close match (the same supplier, day and amount) stops and asks whether it is a different purchase.

You invite your accountant by e-mail, and they get a login of their own that opens your books exactly as you see them, read-only: they cannot post, change or delete anything. What they do there is on the record: every copy they take is logged, and a VAT period they mark reviewed or a year's statements they sign carry their login's name. They can withdraw a signature they gave.

NuAi's own support team can open a business to help it, from NuAi's operator console; what it changes is on the History like anyone else's. You end your accountant's access yourself, from the same screen you granted it on: Settings › Your Accountant. The page for accountants →

The trial balance with every journal line and the VAT201 download as spreadsheets your accountant can open, the whole stock sheet as an Excel workbook, and every invoice, statement and purchase order prints on your letterhead: screen by screen, yours to take, including if you leave. Ask us to run an export in front of you.

A gym takes no ID document at all, and a shop's till signs a member up with their name, mobile, e-mail and consent: no ID photo. Where a business signs members up with an ID check (a members' club), the new member photographs their ID on their own phone and the reading happens right there, on the device: the document is never sent away to a third-party service to be read. That verification record lives in the EU store under the same agreement.

On request, one approval at NuAi erases a member's details: their profile, membership, ID photos, scan location history and message content, and disables and anonymises their sign-in. ID photos are kept out of the off-site backup on purpose, so erasing them leaves no backup copy behind. Purchase records stay in the books, tied to a member record that has been anonymised. Not yet part of an erasure: the e-mail address a receipt or invoice was sent to, and a customer's proof of payment.