Trust Centre

Bean Counter (CFO) — Financial health, cash flow analysis, ratio interpretation, debtor management, dunning strategy and EBPP. Knowledge base: SA financial standards, IFRS for SMEs, NCR credit guidelines.

The Rule Book (CGO) — Regulatory guidance covering POPIA, PAIA, NCA, NCR, CIPC obligations, B-BBEE requirements, King IV governance, labour relations and sector-specific compliance. Always frames guidance as regulatory context — never legal advice.

Brand Guru (CMO) — Brand positioning, marketing strategy, social media, content planning, customer acquisition and SA market context including ASA/ASASA advertising standards.

Deal Maker (CSO) — Sales pipeline management, proposal writing, pricing strategy, objection handling, client retention and CRM guidance.

The Fixer (COO) — Operations, supply chain, vendor management, SOP design, business continuity planning and workflow automation advice.

The IT Guy — 1st line support (password resets, device issues, connectivity, printers, email), 2nd line support (cloud account setup, VPN, Active Directory, MDM, licences, backups) and 3rd line AI-assisted guidance (Claude prompting for coding, architecture, DevOps, design systems and technology selection). SA market-aware — recommends local retailers and load-shedding resilient solutions. Available across all plans; 2nd line unlocks on Professional+, 3rd line on Enterprise.

Version Control via GitHub — All application code, configuration changes and documentation are managed through GitHub with full commit history, pull request reviews and audit trails. Every change to billsource.ai is traceable to a specific commit, author and timestamp.

Automated Deployment Pipeline — Changes to production are deployed via Railway's automated CI/CD pipeline triggered only from approved GitHub commits. No direct server access for deployments.

Knowledge Base Version Control — AI training documents are version-controlled and changes to the knowledge base follow a review process before being embedded into the vector store.

Data Persistence — User accounts and session data are stored in-memory during the current phase, with PostgreSQL database persistence being introduced progressively. No financial documents or chat content are retained beyond your active session unless you have explicitly requested report storage.

Environment Separation — Development and production environments are strictly separated. No untested changes reach production.

Incident Response — Security incidents are logged, triaged and resolved with documented root cause analysis. Contact security@billsource.ai to report a vulnerability.