Security & Compliance
How Nexquado protects your accounting data
Your ledger holds revenue, costs, customers and staff expenses. This page sets out where that data lives, how IRAS-related records are kept, and what an auditor can see — written for the person who signs off on the decision.
Column 01 · Storage
Where your data lives and how it is protected
Nexquado data is stored in cloud infrastructure with encryption in transit and at rest. Access to production systems is limited to the staff who need it for support or engineering work, and that access is logged — not summarised, not sampled.
Backups run on a regular schedule, and restoration is tested rather than assumed. If you need to know the specific hosting region for your company's records, ask us directly and we will confirm it in writing. That confirmation is the version your auditor will want on file, not a generic statement from a marketing page.
What we can confirm
- Encryption in transit and at rest
- Logged access to production systems
- Scheduled backups with tested restore
- Hosting region confirmed in writing on request
Column 02 · IRAS record keeping
Records that satisfy IRAS expectations
Singapore companies are expected to keep accounting records for five years from the end of the relevant year of assessment, and to be able to produce them if asked. Nexquado keeps your transactions, invoices and reports available for the life of your subscription and allows export at any time.
Deleting a transaction does not silently erase it from the audit history. The original entry and the correction both remain visible, which is what an auditor or a tax officer expects to see. That distinction matters: a system that lets you quietly overwrite figures creates a problem at review, not a convenience.
Five years from the end of the relevant year of assessment, held and exportable for the life of your subscription.
Column 03 · Audit trail
Audit trail and access controls
Every user action carries an identity and a timestamp. You can see who posted an entry, who edited it, and when the change was made. Role-based permissions decide what each user can do, from read-only viewing through to full administration.
For companies with an external accountant, this means you can grant access for the engagement period and remove it when the work is done, without changing anyone's password or sharing a login. Separate logins per person are required, not optional, precisely so the audit trail means something.
Column 04 · Personal data
Handling personal data
Client and supplier records may include personal data such as names, contact details, and identification numbers where required. Nexquado processes that data on your instructions as the account holder; you remain responsible for having a lawful basis to hold it.
Our own handling of personal data is described in the Privacy Policy — what we collect, why, how long we keep it, and how to make a request about your data. If your company has a data protection officer, we can respond to their queries through the contact channel.
Division of responsibility
-
You, as the account holder
Decide what client and supplier records enter the ledger, and hold the lawful basis for keeping them.
-
Nexquado, as the platform
Stores and processes that data on your instructions, with logged access and encryption in transit and at rest.
-
Your advisers
Review records, filings and disclosures, and can be given time-boxed access during an engagement.
Column 05 · Boundaries
What we do not claim
We are not certified as an audit firm and we do not issue audit opinions. We do not guarantee that using Nexquado makes your company compliant with any specific regulation; compliance depends on your records, your filings and your advisers.
What we can tell you is exactly how the system stores, logs and exports your data, and let your accountant or auditor make their own assessment. If a reviewer needs documentation about our controls, request it through the contact page.
What a reviewer can ask us for
Monday to Friday, 9:00 AM – 6:00 PM SGT · +65 6833 6529
Column 06 · Review questions
Questions finance teams ask before signing off
Short answers you can forward to your accountant, auditor or data protection officer without editing them first.
Can our auditor see what was changed after a period was closed?
Yes. Every user action carries an identity and a timestamp, and a correction leaves the original entry visible beside it. A reviewer can read the sequence rather than a final figure with no history behind it.
How long are our records available inside the platform?
Transactions, invoices and reports remain available for the life of your subscription, and you can export them at any time. Singapore's five-year record-keeping expectation runs from the end of the relevant year of assessment, so exports are how most teams bridge the gap between the platform and their own archive.
Do we need separate logins for our external accountant?
Separate logins per person are required rather than optional, precisely so the audit trail means something. Grant access for the engagement period, then remove it when the work closes — no password sharing, no shared account to unwind later.
Who is responsible for personal data in our client records?
You remain responsible for having a lawful basis to hold the client and supplier records you enter. Nexquado processes that data on your instructions as the account holder, and our own handling is set out in the Privacy Policy.
Can you confirm the hosting region for our company's records?
Ask us directly and we will confirm it in writing. A written confirmation is usually what an auditor wants on file, rather than a general statement that data is stored securely.
Column 07 · Next step
Put your questions to the team before you decide
Nexquado is cloud accounting software for Singapore businesses, operated by Nexquado Pte. Ltd. from 8 Marina View, #42-01 Asia Square Tower 1, Singapore 018960. Send the questions your accountant or data protection officer has raised and we will answer them in writing.
Support runs Monday to Friday, 9:00 AM – 6:00 PM SGT. Call +65 6833 6529, or use the contact form and we will reply with the details you need for your review file.
Direct contact
- Business phone +65 6833 6529
- Email [email protected]
- Support hours Monday to Friday, 9:00 AM – 6:00 PM SGT
Prefer to read first? The Privacy Policy covers what we collect and how long we keep it.