Complete data isolation
Every request verifies that the user belongs to the company before showing or changing any data. Each entity is fully separated — no accidental cross-company access, ever.
Security
How Clara Global protects your data
Security is a product feature, not a checkbox. Encrypted fields, two-factor auth, breach-checked passwords, and a complete audit trail — built in from day one.
Sensitive fields encrypted individually
Bank account numbers, IBANs, routing numbers, and tax IDs are each encrypted with their own key — not just the database as a whole. Receipts in cloud storage are encrypted too. Keys can be rotated without downtime.
Two-factor authentication
Users can enable an authenticator app plus eight single-use backup codes. You can require it for administrators immediately, or roll it out to your entire team with a grace period. Too many wrong attempts? Access is temporarily locked.
Full audit trail — 44+ event types
Submissions, approvals, rejections, rule changes, role updates, bank edits, and payment overrides are all recorded with who did it, when, and what changed. Sensitive data is automatically removed from log entries.
Role-based access control
Four roles per entity — employee, manager, accountant, administrator — each with clear boundaries enforced on the server. Users only see what their role allows. Platform-level routes are protected by a separate admin gate.
Passwords checked against known breaches
Every password is securely hashed and checked against a database of known breaches on signup and reset — without ever sending the password to a third party. Login attempts are limited to prevent brute-force attacks.
Global expense management starts here
Manage your team's expenses in any country and currency. Receipts, approvals, and bank-ready payment reports — all in one place.