Role-based access
Access is role-based. Each role is given what it may see and do.
Security and access controls: roles, logs and sign-in
Who can do what in Xpense is decided by role, and what they did is logged. This page lists the controls and how to reach us about security or privacy.
The controls
Approval and action logs
Approvals and actions are logged.
Timelines
Every trip, expense and advance has a timeline.
Available
Sign in with Microsoft
Sign in with Microsoft is available.
Available
Encrypted credentials
Integration credentials are encrypted at rest.
AI switched on per company
AI features are switched on per company from an AI control plane, and AI usage is metered with plans and budgets.
Access
People see what their role allows
Employees sit in your company structure: group, company, business unit, plant, cost centre. Their role decides which trips, claims and reports they can open and what they can do with them.
-
The employees list in the portal, with demo data.
Records
A record of what was done
Approvals and actions are logged. A trip, an expense or an advance can be opened to see its timeline: each step, who took it and when.
-
The history of an advance request, with demo data.
AI assistants
What an assistant can reach through MCP
Xpense has an MCP server for AI assistants and agents. Every MCP call carries the employee's own sign-in token and is bound to one company, so an assistant can do only what that employee can do.
AeonX Digital certifications
Xpense is built and run by AeonX Digital.
AeonX Digital is certified to ISO/IEC 27001, ISO 9001 and ISO/IEC 20000-1.
Questions about security and access
How is access controlled?
Access is role-based. Finance decides what each role can see and do.
Can we sign in with our Microsoft accounts?
Sign in with Microsoft is available.
How are integration credentials stored?
Integration credentials are encrypted at rest.
What certifications does AeonX Digital hold?
AeonX Digital is certified to ISO/IEC 27001, ISO 9001 and ISO/IEC 20000-1.
What can an AI assistant reach through MCP?
Only what the signed-in employee can. Every MCP call carries the employee's own sign-in token and is bound to one company.
How do we report a security issue or ask about privacy?
Write to privacy@aeonx.digital.