Your books. Your machine. Your rules.
Accounting-Ops is the agent-first financial operations platform for operators who refuse to send their books to a frontier AI provider. Self-hostable. Multi-entity from day one. Audit-defensible by construction.
Cash position
$487,193
+$18.2k week
Runway
14.2 mo
stable
Awaiting approval
3
2 material
- 14:22:08recon-1.2->Matched 47 stripe payouts to invoice batchAPPROVE
- 14:22:09compliance->Flagged $4,180 vendor payment for 1099-NEC threshold (cumulative $612)NEEDS_REVIEW
- 14:22:12bookkeeper->Categorized Anthropic.com to SaaS SubscriptionsAPPROVE
- 14:22:14tax-rules->Computing Q1 NJ sales tax nexus...THINKING
We sit above the model providers and below the human reviewer. Not a bookkeeping service. Not your CPA's tool. The substrate your agents actually run on when the numbers have to be right.
Built for operators, not buyers.
Six core decisions that distinguish Accounting-Ops from every closed-SaaS AI bookkeeping product.
Agent-first by construction
Brigade agents do the work. The app is observation, approval, and chat. Nothing posts to your ledger until a human signs off. No magic. No surprises.
Sovereignty as the default
Self-host on your own hardware. Run fully air-gapped if you need to. Your journal, your encryption keys, your egress policy. We don't see your books and never will.
Multi-entity from day one
Intercompany eliminations, consolidated reporting, and per-entity policy. Built for operators running five revenue streams across three legal entities, not bolted on at Series B.
Vertical compliance, not generic
Per-tenant policy engine for FERS 80%, 1099-NEC, multi-state sales-tax nexus, HIPAA segregation, IOLTA trust, DCAA/CAS, and QSBS §1202 tracking. Rules ship as files you can read.
Audit-defensible journal
Append-only, cryptographically chained, immutable. Every entry traces back to the source document, the agent that drafted it, the policy that validated it, and the human who approved it.
MCP and A2A native
Other apps' agents call into Accounting-Ops over MCP. Our agents call out over A2A. Same skill files behind Claude, Gemini, or on-prem Qwen. Swap runtimes without rewriting your books.
How it works.
Three steps. The agent does the work. You approve the parts that matter.
Connect your sources
Banks, payment processors, payroll, invoicing, contracts, receipts. Ingest stays on your machine. We never proxy through our cloud.
Agents draft, you approve
Brigade agents classify transactions, draft journal entries, reconcile accounts, and flag anomalies against your vertical's rules. Every draft cites its source and its policy.
The ledger commits
Once you approve, entries land in an append-only journal with a cryptographic chain back to the document, the agent, and the runtime. Auditors love it. So do you.
Who it's for.
Polymath operators
Five revenue streams, three entities, one brain. You stopped fitting in QuickBooks two years ago.
Federal contractors
SDVOSB-aspirant or already there. DCAA-compliant timekeeping, CAS-flavored cost pools, indirect-rate math that survives a desk audit.
Healthcare practices
PHI-segregated financial flows. HIPAA-aware data handling. Self-hosted so your accountant doesn't become a business associate.
Law firms
IOLTA trust accounting that won't get you sanctioned. Per-matter ledgers. Three-way reconciliation as a first-class primitive.
VC-backed startups
Preferred-stock waterfalls, §1202 QSBS holding-period tracking, 409A-aware equity events. The instrumentation your future Series B due-diligence wants.
Sovereignty-conscious enterprises
You can't send your general ledger to a frontier AI provider. You shouldn't have to. Run Accounting-Ops behind your own firewall, on your own GPUs, against your own models.
Why not the obvious alternatives.
Not Pilot or Bench.
Those are bookkeeping services with a portal. We're software you run.
Not QuickBooks or Xero.
Those are your CPA's tool. We're your AI's substrate.
Not Digits, Puzzle, or Truewind.
Those are closed-SaaS with one model behind a logo. We're multi-runtime, self-hostable, and the skill files are yours to read.
Not Codat or Plaid.
Those are pipes. We're the layer where the pipes turn into a defensible ledger.
Open by construction.
Built on a fork of Anthropic's Apache 2.0 financial-services agent scaffolding, extended with the policy engine, multi-entity model, and immutable journal. Skill files are plain text. The audit log is a database you can grep. If a fact about your business can't be explained, it can't be posted.
Apache 2.0 where we can. Source-available where we have to. No black boxes in your books.