Log In Get a Demo

Integrations

One card per source category, data flows in from anywhere.

View all integrations →
Accounting CRM HR and Payroll Payments Data

The Agentic Layer

The governed foundation — platform capabilities.

Unified Data Business Logic & Modeling AI Agents & Automation Security & Controls

Surfaces

The layer powers every surface — finance works wherever work happens.

See all →
Cube web Excel & Google Sheets AI Assistants via MCP Slack & Teams PowerPoint & Google Slides BI Tools
Product Updates

Reporting & Analysis

Business performance tracking, variance, and analytical insight.

See all →
Variance Analysis Ad-Hoc Reporting Executive Reporting

Planning & Modeling

A comprehensive look at forward-looking corporate financial strategy.

See all →
Revenue Cash Flow Scenario Planning Headcount Vendor/Expense Annual Budgeting

Consolidation & Close

The entire financial close and data management cycle, at a high level.

See all →
Data Consolidation Financial Close Data Governance & Audit

Industries

Purpose-built for how each sector runs finance.

See all →
Software Business Services Healthcare Retail Financial Services Manufacturing Nonprofits Real Estate Multi-Location
Security at Cube · SOC 1 & SOC 2 Type II · HIPAA

Financial data security and AI you can audit.

Cube is SOC 1 and SOC 2 Type II certified, HIPAA compliant FP&A software where every AI answer is permission-checked, logged, and traceable to the source transaction.

Get a demoTry it free
A glass shield layer representing Cube security controls
Permission checkscope: dept R&D
Loggedquery · answer · drill
Traced14 transactions
SOC 1 & SOC 2 Type IIHIPAA compliantHosted on AWSSAML SSOMFAEncrypted at rest + in transitFull audit logsSOC 1 & SOC 2 Type IIHIPAA compliantHosted on AWSSAML SSOMFAEncrypted at rest + in transitFull audit logs
The stance

With AI in finance, trust is a mandate. Cube builds compliance, permissions, and traceability into every layer.

From the login to the AI answer, nothing moves through Cube without a rule applied and a record kept.

Login
SSO & MFA
✓ Identity verified
Permissions
Role & entity scope
✓ Rule applied
Agent
Works inside your scope
✓ Rule applied
Answer
Traced to 14 transactions
✓ Source attached
Audit log
User, scope, sources
✓ Record kept
Get a demoTry it free
Vendor review

Everything IT needs, ready before they ask.

Transparency is the default: the documents live in the open, and the team behind them picks up when you call.

Visit the Trust Center
Always-on Trust CenterCertifications · policies · documentationSOC 1 & SOC 2 reports on requestShared when you askQuestionnaire supportWe answer it, and join the review call
Get a demoTry it free
Three questions, answered

Certified. Controlled. Traceable.

Is it audited?
Certified

SOC 1 and SOC 2 Type II, examined by Dansa D'Arata Soucia. HIPAA compliant, on AWS infrastructure. Reports available on request.

Who sees what?
Controlled

Role-based access on every surface: the Cube app, connected spreadsheets, and reports. The same rules are enforced for the AI.

Can we verify it?
Traceable

Every figure and every AI answer drills to the source transactions behind it. Audit questions become clicks.

Get a demoTry it free
FP&Agents, on the record

Every AI action, logged and auditable.

Cube's FP&Agents run on your governed model. Queries, answers, and publishes are recorded with the user, the permission scope applied, and the sources used. Denied actions are logged too.

Try it freeGet a demo
fp&agent · audit trailLive
09:41:07s.chenqueryR&D variance, Q1 · scope: dept R&D
09:41:09s.chenanswertraced → 14 txns · sources: NetSuite
09:44:52s.chendrill6520 → source txns · logged
09:52:18j.ortizpublishcomp plan update · denied: no access
09:52:18systemrecorddenial written to log · reviewable
10:03:41m.patelquerycash runway, downside · scope: exec
Every query · every answer · every publish · every denial
In the product

The checklist, answered before you send it.

The same permissions govern the Cube app, connected spreadsheets, reports, and FP&Agents.

A glass checklist representing security controls
Try it freeGet a demo
✓
Role-based access

Permissions set once follow the user into the app, spreadsheets, and reports.

✓
AI under the same rules

FP&Agents inherit the permissions of the person asking. Denied means denied.

✓
SAML single sign-on

Your identity provider controls every login to Cube.

✓
Multi-factor authentication

App-based or text-based MFA on every account.

✓
Full audit logs

Every fetch, publish, and permission change is logged and reviewable.

✓
Encryption everywhere

TLS in transit and encryption at rest, on secure AWS infrastructure.

Put your controls questions to us.

Bring the security questionnaire. We answer it live and walk through permissions and the audit trail on your own scenario.

Try it freeGet a demo
FAQs

Questions finance leaders ask.

Is Cube SOC 1 and SOC 2 Type II certified?

Yes. Cube has completed SOC 1 and SOC 2 Type II examinations conducted by Dansa D'Arata Soucia, and certifications are kept current in the Cube Trust Center. The full report is available on request.

Can we audit what the AI did?

Yes. FP&Agent activity is logged with the user, the permission scope applied, and the sources used, and every AI-assisted figure traces to the accounts and transactions behind it. Reviewing the AI means reading the log, then clicking through to source.

What security certifications should FP&A software have?

At minimum, FP&A software should have SOC 1 and SOC 2 Type II reports, encryption in transit and at rest, SSO and MFA, role-based access controls, and a full audit trail. Cube meets each of these and keeps current certifications in the Cube Trust Center.

Is AI FP&A software safe for financial data?

It is when the AI works inside the same permissions, audit trail, and governance as the rest of the finance system, and customer data is not used to train public models. Cube’s AI respects each user’s access, logs every action, and runs on Cube’s SOC 1 and SOC 2 Type II audited platform.

How do Cube's AI features handle our data?

Cube’s AI features never leave your governed data. FP&Agents work inside your governed Cube model and inherit each user's permissions, so an agent only uses data the person asking is allowed to see. Every AI-assisted figure traces back to the accounts and transactions behind it.

How does Cube control who sees what?

Cube controls access with role-based permissions. Admins set permissions once and they follow each user across every surface, including the Cube app, connected spreadsheets, and reports. The same rules are enforced for FP&Agents.

Where is Cube hosted and how is data encrypted?

Cube runs on Amazon Web Services infrastructure. Data is encrypted over TLS in transit and encrypted at rest, and internal systems sit behind separate access controls that are never exposed to the public internet.

Does Cube support SSO and MFA?

Yes. Cube supports SAML single sign-on so your identity provider controls every login, plus multi-factor authentication through an authenticator app or text message.

How do we run a security review of Cube?

Cube supports security reviews end to end. Start at the Cube Trust Center for current certifications and controls. Security reports are available on request, our team supports your questionnaire, and we join vendor review calls when your IT team wants a live walkthrough.

Still have questions? See it on your own numbers.
Try it freeGet a demo