Security

How we protect your data

GreenBar builds local-first tools, so there is one security model, not two. Clearing runs on your own computer. GreenBar stores none of your clients' financial data. GreenBar AP Pay, our payables tool, is still in development and will run on your machine the same way. Here is how your data stays protected.

Available now

Clearing

Local-first desktop · available now

Clearing installs and runs on your own machine. GreenBar operates no cloud and stores none of your financial data, so most of what a cloud product has to defend simply isn't there to attack. What we protect instead is the integrity of your work — and your control over what, if anything, ever leaves your computer.

Get Clearing

The close stays on your computer

Clearing keeps the close on your computer. Bank and ledger files you import as CSV or Excel, and their transaction rows, are not uploaded to GreenBar. When a license key is saved, Clearing checks that key with greenbarsystems.com and checks for an update. Both calls send the key only, never your books, and Clearing keeps working offline if they fail. If its built-in spreadsheet reader ever fails to load, Clearing downloads a fresh copy (SheetJS) from a public CDN, and that download carries no file data. Every other outbound connection stays off until you turn it on: team sync on Pro and Firm to a server your firm hosts. Team sync can share sign-off records, user accounts, client names and tax IDs, account names with masked numbers, and mapping templates, but never carries client files or transaction rows. If your firm runs its own Clearing server and you sign in to it, your audit trail is copied to that server. It is never sent to GreenBar. For the plan-by-plan detail, see no-upload bank reconciliation for bookkeepers and CPA firms.

Runs locally on Windows, macOS, and Linux. No GreenBar account. The default background calls are a license check and an update check, and both run only when a license key is saved. Neither one carries financial data.

GreenBar runs no cloud of its own and stores none of your clients' financial data. There is no shared model trained on your books. What Clearing learns from your decisions stays on your computer and is never sent to GreenBar.

Tamper-evident sign-off

Clearing's value is a close you can prove. The record of who did what is protected so it can't be quietly rewritten after the fact.

Hash-chained history. Each workflow event is chained to the last with a SHA-256 hash. When a file opens, the chain is verified. If a signed-off period was altered, it is detectable.

Sealed at sign-off. Once a period is signed off it is sealed; any later change shows in the trail.

Roles and sign-in

Separation of duties. On a team, the preparer and the reviewer must be different people — the same person can't both prepare and approve.

Optional end-to-end encryption. When your team sets an organization passphrase, preparer and reviewer names and notes are encrypted so only your team can read them.

Local sign-in uses PBKDF2 password hashing. Two-factor authentication is not yet available.

Export safety

Exported spreadsheets escape cell contents against formula injection, so a crafted vendor name or memo line can't execute when the file is opened in Excel.

In development

GreenBar AP Pay

Local-first payables · in development

AP Pay is our payables tool, and it is still being built. Like Clearing, it will run on your own computer rather than as a hosted service. We are not publishing its security details yet — we would rather say nothing than describe controls that are still changing.

AP Pay has not shipped yet

There is no release date to share. When AP Pay ships, its security details will be published here alongside Clearing's.

Join the AP Pay waitlist

Security questions

If your organization requires security documentation ahead of a purchasing decision, we can provide a completed security questionnaire and schedule a security review call. Reach us at support@greenbarsystems.com.

Get the one-page brief

A condensed summary of everything on this page: how Clearing runs locally, what stays on your machine, and how sign-off is kept tamper-evident. Formatted to forward to IT or compliance.

Or view it now, no email needed →

Responsible disclosure

If you believe you have found a security issue in Clearing, GreenBar AP Pay, or greenbarsystems.com, please report it to support@greenbarsystems.com. We will acknowledge your report within two business days. Please do not publicly disclose the issue before giving us a reasonable window to address it.

Do not access, modify, or delete data that is not yours.
Do not perform denial-of-service or automated scanning without prior authorization.

Last updated: July 2026. Questions? Email support@greenbarsystems.com.

← Back to home Privacy Policy →