Trust Center

Built to be trusted with federal money.

Varial handles the data behind your Single Audit. Here's exactly how we protect it — and why your auditor will be comfortable.

SOC 1 Type 2 — issued

An independent report on our controls over financial-data processing, tested over a period — not a point in time. Available under NDA.

SOC 2 Type II — in progress

We're pursuing SOC 2 Type II and will share the report when issued. We do not claim SOC 2 today.

Read-only by default

Varial reads your QuickBooks. It only writes a correction back when you explicitly approve it — and logs exactly what changed, when, and who approved it.

We never move your money

Varial is not a bank and never touches your funds. It maintains your restricted-fund records and produces audit artifacts — nothing more.

Your data stays yours

Export your full fund ledger, roll-forward history, and audit records at any time, in standard formats. No lock-in.

Encryption everywhere

Data encrypted in transit and at rest. Least-privilege access. Scoped, revocable QuickBooks connections per organization.

Built to your auditor's standards

Varial is built around Uniform Guidance (2 CFR 200) and GAGAS — the rules your CPA firm already works to. The approval log is the control trail auditors expect.

Per-organization isolation

Every customer's data and agent are strictly isolated. No organization can ever see another's books.

Questions about our security posture, or need our SOC 1 Type 2 report under NDA? Contact us.

Varial.Audit-readiness for federally-funded nonprofits · by HoldingsSOC 1 Type 2 · SOC 2 in progress · we never move your money