Athena Workflow Logo
Security & Trust

Your Data. Our Responsibility.

Your clients trust you with their most sensitive financial information. We protect that trust with enterprise-grade security at every layer — encryption, infrastructure, access control, and incident response.

Enterprise-grade data center with modern security infrastructure
Security Architecture

Six Layers of Protection

Security isn't a feature — it's the foundation. Every layer is designed to protect the data your clients entrust to your firm.

Data Encryption

TLS 1.2 encryption for all data in transit
AES-256 encryption for all data at rest
Encrypted storage for OAuth tokens and sensitive credentials
Secure key management with environment-isolated secrets

Infrastructure

US-based data centers
Continuous, automated backup systems
Backups stored on geographically separate systems
Disaster recovery protocols tested and maintained

Payment Security

PCI Service Provider Level 1 compliance via Stripe
No credit card data stored on Athena servers
Visa, MasterCard, and American Express accepted
Secure payment processing with fraud detection

Access Control

Role-based permissions (Owner, Manager, Employee)
Email-based two-factor authentication for staff sign-in
Session management with automatic timeout
Company-level account deactivation controls

Incident Response

48-hour breach notification commitment
Annual security scanning and assessment
Dedicated incident response procedures
Transparent communication during security events

Data Handling

Data destruction following DoD 5220.22-M standards
NIST 800-88 compliant data sanitization
GDPR-compliant data processing
Data subject rights: access, correction, removal, portability
Published Policies

Our Policies, in Writing

The commitments behind the controls above. Read them online or download a PDF for your records, vendor reviews and compliance files.

Data Retention and Deletion Policy

How long Athena Workflow keeps personal and financial data, what is removed when an account is deleted, and how to exercise access, correction, deletion and portability rights.

Read policy Download PDFv2.0 · reviewed 2026-10-11

Information Security Policy

The controls Athena Workflow applies to protect the confidentiality, integrity and availability of firm and client financial data: access control, authentication, encryption, vulnerability management and incident response.

Read policy Download PDFv2.0 · reviewed 2026-10-11

Our Commitment

Security is not an afterthought or a marketing checkbox. It is built into every architectural decision, every deployment pipeline, and every data handling process. When your clients trust your firm with their financial data, they are also trusting us — and we take that seriously.

For specific security questions or to request our Data Processing Addendum, contact our team at [email protected].

Ready to Command Your Practice?

See how Athena Workflow transforms accounting operations. Request a personalized demo from our team.