Security

Most accounting tools have to write a long “our SOC team” security page because they hold a copy of every customer's books on their servers. Mowa Books is built differently.

Architecture

Your books — every transaction, invoice, receipt, contact, project, and payroll record — live in your browser's local database (IndexedDB). They never leave your device unless you explicitly export a backup file or print a document.

This means there is no server-side database of your accounting data to be breached, leaked, or subpoenaed. Mowa Product Solutions cannot read your numbers, even if compelled to.

Authentication

Sign-in is handled by Clerk, an SOC 2 Type II certified identity provider. Mowa Product Solutions does not store, see, or have access to your password — only the email address associated with your account. Multi-factor authentication is supported by Clerk; turn it on from your Clerk account settings if you would like an additional layer.

Data in transit

Every connection between your browser and any part of the Mowa Books service uses HTTPS. The website itself is served from Cloudflare's edge network with TLS terminated at the edge. The contact form is delivered over HTTPS to Web3Forms; sign-in traffic goes over HTTPS to Clerk.

Backup is your responsibility

Because your books live in your browser, you are responsible for keeping copies. Mowa Books nudges you to export a backup every 14 days; treat that prompt seriously. The recommended pattern is to keep at least two copies — for example, one in a personal cloud drive and one offline on a separate machine.

If you lose your laptop, accidentally clear site data, or your browser profile is corrupted, the only recovery path is to restore from your most recent export file. There is no recovery from Mowa Product Solutions' side, because no copy exists there.

What Mowa Books is not

Mowa Books is a productivity tool for keeping records. It is not a financial services product, and Mowa Product Solutions does not hold funds, file taxes, or remit any payments on your behalf. The calculations and document formats produced by Mowa Books are best-effort starting points and should be verified by a qualified accountant before being submitted to any tax authority. See the Terms of Service for the full scope of this disclaimer.

Reporting a vulnerability

If you find a security issue in Mowa Books, please disclose it responsibly. Use the contact form in the footer of mowa.work with the subject “Security disclosure” and a clear description of what you found and how it can be reproduced. Please do not post details publicly until a fix is in place. Mowa Product Solutions appreciates the report and will respond as quickly as possible.

Last updated · 5 May 2026