Your books. Your rules.

How HireRami protects your books: row-level security per company, PII masked before model calls, prompt-injection defence, encrypted credentials, UAE hosting.

Security

Each company’s data is fenced off in the database itself. Personal details are masked before any model sees them, documents are read with no tools attached, and every action an agent wants to take passes your policy first.

What protects your data

Isolation in the database: Postgres row-level security on every company table, applied on each transaction, so one company’s query can’t return another’s rows.

PII masked before models: IBANs, card numbers, Emirates IDs, phone numbers and emails are redacted from text before it goes to a language model.

Prompt-injection defence: Arabic and English tripwires, including “our bank details have changed” wording. Documents are read by a model with no tools, and flagged bills can never be paid.

Encrypted credentials: Bank, mailbox and app connection tokens are encrypted at rest with AES-256-GCM. Passwords are hashed with Argon2.

Hosted in the UAE: The app and database run on Azure UAE North, with TLS, key-only server access and nightly database backups.

Roles and approval limits: Owner, admin, accountant, approver and viewer roles, with a per-person limit on what each approver may sign off.

From upload to ledger

1. Upload: The file is stored under your company only; exact duplicates are caught by fingerprint.

2. Mask and screen: Personal details are redacted and the text is screened for injection, before and after the model.

3. Read with no tools: The extraction model can only return structured fields. It can’t act.

4. Your policy decides: Any posting or payment is a proposal that passes validation and your approval rules.

Straight answers

Are you SOC 2 or ISO 27001 certified? Not yet. We’d rather tell you that than show a badge we haven’t earned.

Do you support SSO or two-factor login? Not today. Sign-in is email and password, with passwords hashed using Argon2.

Does my data stay in the UAE? Your books and documents are stored on Azure UAE North. Text sent for AI processing goes to the configured model provider, with personal details masked first.

Can an agent move money or file on its own? No. Payments, payroll, tax returns and e-invoice submission always need a person, whatever autonomy you set.

Can past entries be edited? Posted ledger lines are immutable. Corrections are made by reversal, and every change is written to the audit log.

Trust, with the receipts

See every step an agent takes, and keep the final say.