Security
Security and data protection
EmniAi Connector is an intermediary service. Your books stay in Fortnox – we only store what is needed to keep you logged in.
Login through Fortnox
You log in directly with Fortnox (OAuth 2.0 with PKCE). Emni never sees your Fortnox password.
Encrypted keys
Fortnox access is encrypted with AES-256-GCM before it is stored, in a database with EU jurisdiction.
No bookkeeping data stored
Data from Fortnox passes through Emni to your AI assistant but is not stored by us. Files are not stored either – they are passed straight on.
Your own permissions
All access uses your Fortnox user. What you are not allowed to do in Fortnox, the AI cannot do either.
Approval before change
Writing tools are marked so that Claude and ChatGPT ask you before anything changes. Vouchers and invoices can never be deleted.
Audit log
Every call is logged with user, company, time and type of call – without bookkeeping content.
Technical details
- Hosted on Cloudflare with HTTPS everywhere.
- Links for connecting companies are signed and valid for 15 minutes. Download links are valid for 5 minutes and at most three downloads, upload links for 10 minutes and one use, and only a hash of the link is stored.
- Paths to Fortnox are validated so that calls only go to the Fortnox API.
- You can remove a company’s connection at any time, and revoke access in Fortnox under Integrations.
About the AI provider
What you ask and the answers fetched from Fortnox are processed by the AI service you use (Anthropic for Claude, OpenAI for ChatGPT) under your agreement with them. Use a business plan if you need their business terms.
Found a security issue? Email hej@emni.se.