Straight answers on encryption, access, and what we will not claim.
What is MizuAlign?
MizuAlign is financial operations software for owners and finance teams. Connect accounts, capture receipts, run budgets and cash-flow views, and close books with an exportable audit trail - then add invoicing, projects, or Enterprise controls like SSO when you need them. Personal or household tracking is available as a secondary mode. It is bookkeeping and analysis software - not a bank or cash custodian.
Is MizuAlign really free to start?
Yes. Free means free: $0/month, no credit card, no ads, no selling financial data, no affiliate offer wall, and no credit-card marketplace. You get safe-to-spend and attention alerts, household sharing, 50 receipts per month, one budget category, and 250 AI credits per month (optional paid top-ups). Upgrade to Starter ($15/mo) for invoices, vendors, and more capacity; Pro ($39/mo) for dual personal+business books, forecasts, and approve-before-act financial intelligence; or Enterprise for SSO, audit history, and white-label configuration.
Do you support SSO for enterprise teams?
Enterprise workspaces include a SAML 2.0 and OIDC setup wizard for Okta, Microsoft Entra ID, and Google Workspace. Login still has to be configured and tested with your identity provider. See Settings → Security → SSO after a workspace is provisioned.
Is there an audit log for compliance?
Enterprise includes an append-only audit history of admin and security events with CSV export and configurable retention. See Settings → Security → Audit Log or the Security page for details.
How does audit log retention and export work?
Enterprise admins access Settings → Security → Audit Log to filter events by actor, type, and date. Export to CSV for your retention policy. A configurable retention cron purges events older than your policy window.
Where is data stored and can we get a DPA?
Application data is hosted on PostgreSQL through Supabase and protected by TLS in transit and provider-managed encryption at rest. The current DPA is a draft and is not represented as an executed agreement. Review implementation details on the Security page.
How does Enterprise seat licensing work?
Enterprise includes 10 seats (owner plus nine teammates). Additional seats are $15/month each. Admins invite teammates from Settings → Team and manage roles, data-sharing controls, and per-member AI credit wallets on Enterprise.
Do you offer white-label and a client portal?
Yes, on Enterprise. White-label settings (logo, colors, custom domain) live under Settings → White-Label. The client portal supports magic-link auth, invoices, and Pay Now flows - configure under Settings → Portal.
How does receipt scanning work?
Upload a JPG, PNG, or PDF receipt. MizuAlign extracts available merchant, date, amount, and line-item fields for review before they are confirmed.
Can I connect my bank account?
Yes, via Plaid with read-only access. Credentials are never stored on our servers. Linked accounts sync balances and transactions into your workspace.
Is my financial data secure?
Application traffic uses TLS in transit. Hosted database encryption at rest and AES-256-GCM protection for selected secrets are documented on the Security page. MizuAlign does not claim SOC 2 certification.
What SLA do you offer?
Live status, incident history, and component health are published at /status. A contractual SLA is only what appears in a signed agreement - we do not invent one here.