Security is the foundation.

Pastel holds financial data for many companies at once. That is a responsibility we designed for from the first line of code: encrypted, isolated, audited, and never used to train anyone's models.

Access, controlled

SSO, two-factor, and role-based permissions down to the account level. People see exactly what their role allows, nothing more.

A complete audit trail

Every agent action, every human sign-off, every data access. Logged and reviewable. When an auditor asks how you know, the answer is one click.

Encryption everywhere

AES-256 at rest, TLS 1.3 in transit, keys managed and rotated.

Compliance

GDPR-ready data handling, data processing agreements on request.

Your data belongs to you

Pastel never trains shared models on your data, never sells it, and supports full export and deletion on request. Each company's data is isolated in its own space; no mixing, ever.

What the audit trail looks like.

Agents leave receipts. People leave signatures. Every figure can be walked back to its sources, and every action, human or not, is on the record.

$412,908 Bank feed · Chase …4402 Balance verified Apr 1 Ledger · account 1010 Reconciled · 0 unmatched Stripe payout · Mar 31 Settled · $18,220
03-31 22:04agent · reconcilematched 214 transactions
04-01 08:12agent · monitorflagged Ck #2291 · cited 3 sources
04-01 09:31j.meadow · reviewersigned off March close
REVIEWED · MEADOW & BIRCH CPA · MARCH CLOSE · JM Mar 28