Security and data handling
What Nordsynk does with your books
These answers are for whoever owns the company or is responsible for its finances. We write only what we can stand behind, and we say so where something does not apply.
What you need to know before you connect Fortnox
What Nordsynk reads and stores
Nordsynk fetches data from Fortnox when you ask for something, and never sees your Fortnox password. We store your name, your email and the company details, your Fortnox connection in encrypted form, a log of calls (tool, time and status, but not the content of Fortnox responses) and proposed changes with the decisions on them. Data behind reports and exports is removed after 30 days without use, and documents read from Fortnox are cleared after 24 hours.
Where the data is stored
Nordsynk runs on Cloudflare, and Nordbeam AB has no servers of its own. We do not promise that all data stays within the EU. Product analytics go to PostHog EU Cloud and, when a bank connection is used, detailed bank data is kept in storage with EU jurisdiction. If you have a requirement on storage location, write to us before you buy and we will go through it.
Data processing agreement
For accounting data that Nordsynk reads or writes in your Fortnox company, Nordbeam AB is the data processor and you are the data controller. A data processing agreement (DPA) is available on request. Write to hello@nordbeam.io and you will get it.
Read-only mode: read, never change
By default Claude can propose changes that you approve. If you want the company to be readable only, you can set it to read-only mode. Every read question still works, but every change is stopped before an approval is created or anything is sent to Fortnox. An administrator changes the policy under Settings, Access policy.
Payroll and personnel can be shut out
The company can block payroll, employees, absence, schedules, time reporting and vacation debt in Nordsynk. The block happens before any request goes to Fortnox. Invoicing, bookkeeping, suppliers, customers and payments work as usual. Fortnox consent for Nordsynk is still broad. The limit is a control in Nordsynk, not a reduction of Fortnox permissions.
Approval before every change, and a log
Nothing changes in Fortnox until you have approved it. You see a preview, and the approval link cannot be used after 15 minutes. If the request changes, a new approval is needed. Nordsynk logs every call to Fortnox with user, time and action.
Your own AI assistant is the only model that sees the data
Nordsynk runs no language model of its own on your books. The only model that sees the data is your own assistant, for example Claude, under your agreement with its provider. One exception: if you ask an accounting-rules question, the question text, without Fortnox data, is used to find the right source.
Nordsynk's other products have their own sections in the privacy notice. Leverantörsfakturor and Utlägg use Anthropic, among others, to read documents, and that is described there.
Missing an answer?
Write to us, and we will answer what you need before you buy.