Role-based access
Permission presets from owner and finance admin through to employee, external consultant and read-only auditor. External consultants and employees never see rates, costs or margin unless you allow it.
Security & privacy
Your rates and margins are sensitive. We treat them that way.
Consulting firms trust us with client lists, rates, costs and external consultant details. Here's how we protect them, in plain terms.
Protected sign-in
Passwords are hashed with PBKDF2 and never stored in plain text. Sessions are signed, and you can sign in with Google instead.
Audit logs
Invoice, bill, referral and Xero actions, edits, exports and billing events are logged with who did what and when.
Your data, your call
Delete your workspace from settings. Operational data is removed; only a limited archive is kept for legal and tax purposes.
Clear sub-processors
We publish every service that processes your data and where it's hosted.
Finance stays in control
Everything goes into Xero as a draft. Nothing reaches a client or supplier until your finance team approves it in Xero.
The details
What's under the hood.
Hosting
Google Cloud, Singapore (Google Cloud asia-southeast1).
Encryption in transit
All traffic to the site and app is served over HTTPS.
Encryption at rest
Google Cloud encrypts stored data at rest by default.
Passwords
Hashed with PBKDF2-SHA256 and a unique salt. We never store or see your password.
Payments
Handled by Stripe. We never receive or store card numbers.
Xero access
Connected via Xero's OAuth. You can disconnect from settings or from Xero at any time.
Read our Privacy Policy, Terms of Service, Data Retention & Deletion, Sub-processors, Cookie Statement and Acceptable Use.
Found a security issue? Email support@consultingconsole.appand we'll respond promptly.
Consulting Console
Give your finance workflow the same discipline as your client work.
Start free with up to 5 projects. Upgrade when you want Xero sync or external consultant billing.