SECURITY & TRUST
Every number traced. Nothing changes quietly.
The record is the product. Every change is attributed, nothing is deleted, and controls run the same way every time.
01 · GUARANTEES
True of every client, every period.
What the
product guarantees
Five properties of the record that hold for every client, in every period. Each is part of how LZR works today.
- 01
Every change is attributed
Each change is recorded against the person, rule or agent that made it. There are no anonymous edits.
- 02
Nothing is ever deleted
A correction is recorded as a new entry, and the original stays in the record. LZR never overwrites a correction someone has made.
- 03
Controls are deterministic
Each rule is compiled, tried on the period first, then run the same way every time. The same data always raises the same flags.
- 04
No entry posts without a person accepting it
WHERE A PERSON DECIDES
Agents propose a category for every transaction, with a confidence and a reason. Nothing reaches the books until a person accepts it, and anything under 85% is marked for checking.
- 05
Closing a flag takes a reason
Every flag is a claim with evidence, and it names the rule behind it. Closing one takes a reason, recorded against the person who closed it.
02 · ROLES
Who holds the pen.
Who can do what
Agents read and propose. People decide what the books say, and every decision is recorded against the person who made it.
PROPOSED BY AN AGENT
ACCEPTED BY A PERSON, THEN POSTED
SIGNED OFF OUTSIDE LZR
PROPOSED BY AN AGENT
ACCEPTED BY A PERSON, THEN POSTED
SIGNED OFF OUTSIDE LZR
PROPOSED BY AN AGENT
ACCEPTED BY A PERSON, THEN POSTED
SIGNED OFF OUTSIDE LZR
AGENT
Reads and proposes
- Read a statement, CSV or PDF, into the ledger
- Propose a category, with a confidence and a reason
- Mark anything under 85% for checking
- Cannot: Post an entry nobody accepted
- Cannot: Overwrite a correction
REVIEWER
Decides, one line at a time
- Accept, change or flag each proposal
- Close a flag, with a reason
- Undo, always in reach
- Cannot: Delete anything from the record
PARTNER
Signs off, outside LZR
Sign-off and filing stay with your firm and the person qualified to do them. LZR never files or signs anything.
NEXT
Setting the team’s priorities: the partner’s judgement about where risk sits becomes the order the team works in.
Roles are set per client. Partners and engagement leads write the rules and see every client; reviewers decide proposals and close flags on the clients they’re assigned; agents can only propose.
THE HUMAN STEP
The review queue. Each proposal arrives with its category, confidence and reason, and nothing posts until a reviewer approves, changes or flags it. The last approval can always be undone.
03 · YOUR DATA
For your security review.
Your data
Where client data is stored, how it is protected and who can reach it: the details a security review asks for, in one place.
01 · STORAGE
Where data is stored
Every client in its own isolated database.
Documents live in encrypted blob storage, kept apart by client. No query reads two clients’ books at once.
02 · ENCRYPTION
Encryption
AES-256 at rest. TLS 1.3 in transit.
Databases, backups and documents are encrypted on disk, with keys held in a managed vault and rotated.
03 · ACCESS
Access control & sign-in
Single sign-on with Google or Microsoft, or email with two-factor.
Access is set per client and role. Removing someone takes effect at once; their past decisions stay on the trail.
04 · RETENTION
Retention & export
Eight years by default, as the Companies Act asks.
Export a client’s ledger, trail and documents any time, as CSV and PDF, including when an engagement ends.
05 · BACKUPS
Backups & recovery
Encrypted daily backups, held in a second region.
Restores are tested on a schedule, so one data centre’s bad day never costs you a month’s books.
06 · SUB-PROCESSORS
Sub-processors
Cloud hosting, email delivery and the AI model provider.
Each handles client data only to run LZR. Model providers never train on it. Full list on request.
04 · FOR YOUR AUDITOR
Answered from the product.
Questions your auditor will ask
Straight answers, each one backed by how LZR works today.
No.Agents read statements and propose a category for every line, with a confidence and a reason. Nothing is posted until a person accepts it.
No.Closing a flag takes a reason, and the closure is recorded against the person who closed it.
Corrected, never rewritten.Nothing is ever deleted. A correction is recorded as a new entry, attributed to whoever made it, and the original stays in the record.
Yes.Each rule is compiled, tried on the period first, then run deterministically. The same data always raises the same flags.
No.Filing and sign-off stay with your firm and the person qualified to do them.
Yes.Every flag carries its evidence and names the rule behind it. Answers to questions about the ledger are built from its rows and cite the transactions behind them.