Roles, permissions and an audit trail you can rely on

Permissions enforced on the server

Many small-business tools hide buttons from users but still let the underlying request through if someone finds another way in. SeroBooks enforces permissions on the server across 207 permission nodes, so a user who is not allowed to approve a bill cannot approve it from any screen, any app or any device. That is the kind of control larger companies expect, offered at the base price.

Each permission separates View from Allow. A bookkeeper can see payroll totals for reconciliation without being able to open individual pay stubs, a store manager can see stock levels without changing costs, and a sales rep can create quotes without seeing the company’s margins. You decide where each line sits for every role in the business.

Approvals and limits

Some actions need a second pair of eyes. SeroBooks approvals can require sign-off before purchase orders, supplier payments or refunds go through, and step-up authentication asks a user to verify again before sensitive actions. Maya, the AI employee in SeroBooks, adds value caps, rate limits and two-person approval for anything it drafts, so automation never bypasses your controls.

In SeroPOS, role-based permissions control who can void, discount, refund or open the cash drawer without a sale. That reduces shrinkage and sweethearting without slowing honest staff, because cashiers can do everything they normally need and only call a manager for the specific exceptions you have chosen to protect, such as large refunds.

• Approvals on payments, orders and refunds
• Step-up authentication for sensitive actions
• Role-based void, discount and refund limits in SeroPOS
• Admin, Payroll and Read-only roles in SeroPayroll

An audit trail that cannot be rewritten

On SeroBooks Pro, the audit trail is append-only: every create, change and deletion is recorded with the user, the time and exactly what changed, and those entries cannot be edited afterwards. Combined with period locks and idempotency keys on money documents, which stop a payment or invoice from being duplicated by an accidental double click, the ledger keeps its integrity.

When a figure looks wrong, the audit trail answers who changed it, when and from what, without guesswork or finger-pointing. That is valuable for owners with several staff in the books, for franchisors overseeing many locations and for accountants who need to explain a year-end adjustment to a client or to the tax authorities.

Security underneath

SeroBooks uses TLS in transit, encryption at rest, per-business tenant isolation and OAuth sessions with step-up authentication. Desktop apps are signed and notarized, card data stays inside certified payment terminals, and Plaid bank credentials never touch Sero. Sero does not claim SOC 2 or similar certifications today; they are on the roadmap, and we would rather say so plainly.

SeroBooks Pro, at $300 a month in USD, includes the append-only audit trail along with payroll for Canada and the US, demand forecasting and job costing. Server-enforced permissions and period locks are part of SeroBooks itself, so even smaller teams get proper controls from the first day they start using it.