Reconciler only reads. It can never move your money.
Reconciliation only needs to read your records. It never needs to spend, transfer, or post. So Reconciler never asks for payment access and never sends a write request, which means the worst case is a data question, never a money question.
In short
Reconciler reads two kinds of input and only ever reads, and that is the whole security model. The first is the CSV exports you upload from any bank, card, processor or ledger. The second is read-only connections you set up with a key from your own account, for Mercury and Brex bank accounts, your payment processor account, and QuickBooks Online, Xero and NetSuite. Reconciler never asks for your bank login and does not connect to any other bank or card issuer. It has no payment initiation, and the product contains no function that posts a journal entry or sends a write request, so it does not move a dollar or change a record. Where a provider offers a read-only key or scope, that is what Reconciler asks for. Matching is decision support: Reconciler proposes matches and explains them, and a person on your team confirms the exceptions before anything is marked reconciled. You can revoke a connection in your workspace, which deletes its key, or delete the key at Mercury, Brex, your processor or your ledger, at any time, and the connection stops immediately.
What we can and cannot do
What Reconciler does with your accounts, and what it never does
| Capability | Reconciler | Why |
|---|---|---|
| Read your transactions and balances | Yes | Matching both sides of your books is impossible without reading both sides. |
| Move, send, or withdraw money | No, never | Reconciliation never requires payment initiation, so we never request the permission. |
| Post journal entries to your ledger | No | Nothing auto-posts. Reconciler proposes, a person on your team decides. |
| Edit or delete a record in QuickBooks, Xero, or NetSuite | No | Reconciler only sends read requests to your ledger, so it never alters your books. |
| Force-match something it is unsure about | No | Low-confidence pairs are flagged as exceptions for review rather than tied out quietly. |
| Have its access revoked by you | Any time | Revoke in your workspace, or delete the key at the provider, and the connection stops immediately. |
How we think about it
Four rules we hold ourselves to
Ask for the least access that works
A tool that can only read cannot be turned into a tool that steals. Where a provider offers a read-only key or scope we ask for exactly that, and where it does not (QuickBooks Online has a single accounting scope) Reconciler still only ever sends read requests, never a payment or a write.
A person always decides
Reconciler is decision support, not an autonomous bookkeeper. It shows you why a $3,200.00 deposit ties to invoice 1043, and your team confirms. Nothing is finalized behind your back.
Every match is explainable
Unexplainable automation is the real risk in finance. Each pair carries a plain English reason and each flag says what failed, so you can audit our reasoning instead of trusting it. See the audit trail.
We are a tool, not an advisor
Reconciler is not a financial, accounting, or tax advisor, and nothing it produces is advice. It matches transactions and flags differences so qualified people on your team can close the books.
Questions people ask
Straight answers about your data
Can Reconciler move money out of my bank account?
No. Reconciler only reads and has no payment initiation capability at all. It never asks for your bank login, and the only bank accounts it can connect to are Mercury and Brex, with a Read Only token you create. It reads transactions and balances so it can match them against your ledger, and it cannot send, transfer, or withdraw a dollar. That is not a policy we promise to follow, it is a permission we never hold.
Will it change anything in my accounting software?
No. Reconciler only reads from QuickBooks, Xero, or NetSuite. It never posts an entry, edits a transaction, or deletes a record. Nothing auto-posts. It hands you matches and exceptions, and a person on your team acts on them inside your own ledger.
Can I revoke access?
Yes, at any time, and you do not need to ask us. Revoke the connection in your workspace, or delete the key in Mercury, Brex, your payment processor or your accounting software, and Reconciler stops receiving data immediately. Access is granted by you and removable by you.
What happens if the AI gets a match wrong?
A wrong match is a suggestion you reject, not a change to your books. Because nothing auto-posts, an incorrect pair has no effect on your ledger until a person approves it. Anything Reconciler cannot confidently tie is flagged as an exception rather than force-matched, which is exactly how a careful close should work.
Is this financial or tax advice?
No. Reconciler is a reconciliation tool, not a financial, accounting, or tax advisor. Every result is decision support that a qualified person on your team reviews before anything is finalized. For advice about your specific situation, talk to your accountant.
Anything we have not answered here, ask us directly at [email protected], or read the full FAQ and our privacy policy.
Reconcile without handing over the keys
Upload your bank and ledger exports or connect supported accounts read-only. Reconciler matches transactions, flags what does not add up, and explains every match. It never moves money and nothing auto-posts.