Control + evidence for AI on client books

Automate your clients' books — without betting the firm.

Fidavit sits between your AI agents and live Xero. Risky actions are policy-checked, held for human approval, and recorded in tamper-evident evidence you can hand to a client or their auditor.

Works with any agent or AI bookkeeping tool that reaches Xero — the brakes you fit before you automate, not after.

Validated against live Xero flows, not mock fixtures · self-hosted · free for design partners.

Why firms hesitate

An agent on a client's live books is one silent mistake from a lost client.

The silent error

Money out, unnoticed

A wrong or duplicated payment nobody catches until reconciliation — and by then the cash has already left.

Fraud & BEC

Paid the attacker

A supplier's bank details quietly changed to an attacker's. The agent pays it, exactly as instructed — no flag, no pause.

Client trust

Years, then gone

One bad automated change to a client's ledger and the relationship you spent years building is finished.

Liability

You answer for it

You deployed the agent. When it acts on a client's books, you're the one who has to explain what it did.

The control loop

Five deterministic steps between the agent and the books — every decision recorded.

01 · agent
Propose
The agent asks to make a change — pay a bill, update a supplier, post a journal.
02 · gateway
Check
Checked against the client's live books: changed bank details, new payees, amount thresholds, lookalike domains.
03 · policy
Hold
Anything risky is stopped and queued — never auto-applied to a client's ledger.
04 · human
Approve / reject
A named approver decides — maker-checker, out of the agent's reach.
05 · record
Evidence
Every step is written to a hash-chained log with a per-decision receipt.

LLMs can propose; rules decide. The enforcement path is deterministic — not a model's guess. Only genuinely risky actions are held; routine work flows straight through, so approvals stay the exception — not a new queue for your team.

Proven on Xero

Validated against a live Xero Demo Company — real read flows, a caught BEC-style change, and a write that was approved, executed, then reverted, leaving the books unchanged.

  • Xero-firstValidated against a live Xero Demo Company — not fixtures.
  • Policy gatesDeterministic rules, default-deny on writes, no model in the decision.
  • ApprovalsRole-authorized human sign-off; an agent can't approve itself.
  • Hash-chained logsAppend-only evidence — any edit fails verification at the exact entry.
  • Per clientOne isolated control + evidence unit per client environment.
The receipts

Evidence you can hand to your client — and to their auditor.

Every decision becomes a record: who proposed what, what was blocked, what was approved. It exports as a portable, self-verifying pack — no account, no install, one command to check.

It runs entirely in your environment. Your client's data never leaves it and never reaches us — Fidavit records decisions and hashes, not bank data.

Evidence that maps to the controls you — and your client's auditor — already answer to:

Hash-chained log → SOC 2 CC7 Immutable decisions → EU AI Act Art. 12 Named sign-off → human oversight (Art. 14) client-confidential · self-hosted self-verifying · nothing to install

Control mappings, not certifications — read the note before you quote us.

decision-packet · case 003REJECTED_BY_APPROVER
tool callupdate_contact · bank details
checkedlive current account fetched from Xero
flagbank_details_changed · HIGH
rulegate-bank-detail-change · policy 0.3.0
approvercfo@firm — "lookalike domain, confirmed by phone"
outcomeblocked · books untouched · chain intact
Design partner program

Free while we prove it together. We're taking on a small group of design-partner firms.

Xero first — on QuickBooks, Sage or another stack? Tell us and we'll scope it with you.

What you get
Free

A governed integration for one of your client stacks, the BEC-catch and approval flow running end to end, and a portable evidence pack you can hand your client's auditor.

Join the program
What's next
Then, per client

Free through the design-partner phase — no surprises. Once it's proven on real books, it's priced simply, per client environment, and you'll know the number well before that day.

Talk it through
Let automation touch the books

Book a pilot.

Bring one client stack. In two weeks you'll have a working control layer, a live decision trail, and an evidence pack — and a clear answer on whether it belongs in your practice.

20-min intro call · sandbox first — nothing touches live client data to start · reply within one business day.

Prefer email? hello@fidavit.com · Setup is one short call to connect a Xero sandbox — we run the deployment, no engineers on your side.

Read before quoting. Fidavit is pilot-stage software. Evidence is tamper-evident, not tamper-proof — an attacker who can rewrite the whole log can rebuild the chain. It holds no certification, and using it certifies nothing; it makes your agent's actions provable, which is what your controls need to extend to a non-human employee. The accurate sentence is: "every governed action is policy-checked, human-gated where required, and provable afterwards."