Authenticated users
Workspace access requires an invited or approved user account. Passwords and authenticated sessions are handled through established account-security services.

Security
ActualCost uses authenticated accounts, organisation-based access and role controls so users reach the workspace they belong to.
Workspace access requires an invited or approved user account. Passwords and authenticated sessions are handled through established account-security services.
Operational records are associated with a company workspace. Database access rules check that the signed-in user belongs to that workspace.
Workspace owners and administrators can manage members. Editor and viewer roles restrict what invited colleagues can change.
Labour entries preserve the rate and calculated cost recorded for that entry so later rate changes do not silently rewrite history.
ActualCost uses established service providers for account authentication, data storage, website delivery and transactional email. Encrypted connections, workspace access controls and role permissions help protect company information while keeping each organisation's records separate.
Customers should invite only authorised colleagues, assign the minimum access each person needs, use unique passwords and remove access when a colleague no longer requires it. Do not share sign-in credentials between people.
ActualCost is under active development. It has not been represented as independently security-certified, penetration-tested or suitable as the only archive for legally required accounting records. Security information on this page will be updated as the service and its controls develop.
If you believe you have found a security or access problem, do not include passwords or confidential project records in your first message. Contact us at valuelabmb@gmail.com.