PROOF is a self-sovereign financial operations platform. Multi-entity double-entry accounting, AI-advised categorization, Bitcoin lot tracking, and CPA-ready reporting — with your ledger and your AI on hardware you own.
| REGIONAL BANK ACH · NORTHWIND LLC Rental Income — confidence 0.97 · rule | +1,240.00 |
| BUSINESS CARD · CLOUD PROVIDER Cloud Infrastructure — 0.93 · model | −118.42 |
| SELF-TRANSFER · EXCHANGE → WALLET 0.01500000 BTC — basis carried, no tax event | ✓ |
The ledger lives on hardware you own. No cloud sync, no telemetry, no subscription that holds your financial history hostage.
Every transaction that posts must balance exactly. Double-entry accounting is the foundation, not a feature — and every record is exportable, queryable, and yours.
The model suggests categories with confidence scores. A human approves before anything changes the ledger. The gate is enforced in the data layer — no code path around it.
One entity or ten. USD only, or satoshi-precision Bitcoin alongside. Simple stays simple; depth is available the day your operation demands it.
What an agent can read, modify, or export is defined explicitly at the data layer — never inferred from context. Every action is logged with the identity that made it.
Transactions arrive on their own. You glance, answer the occasional question, and the books stay finished — so the numbers are there the moment you want them.
Three are ready — approve them together. One needs a human, so it's the only thing asking for your attention.
That's not office supplies — it's a repair at the Oak Street unit.
Recategorized and tagged to Oak Street. It won't ask about that vendor again.
Anything from this contractor is maintenance.
Saved as a rule — applied to the six already waiting in the queue, and to everything that arrives after.
What did repairs cost me across the rentals this quarter?
It shows the accounts and dates it used, so you can check the answer instead of trusting it.
You're looking at the match itself — not taking somebody's word that it happened.
Profit and loss, balance sheet, cash flow — pick a company and a period and it's on screen. There's no month-end close to wait for and nobody to email.
Narrow it to one property, one lender, one project. Send a lender the PDF or your accountant the spreadsheet, stamped with the date every figure was verified.
This vendor was paid twice in four days — $2,240 on the 3rd and again on the 7th.
Duplicate, or a second invoice? Say which and it learns the difference for next time.
It never quietly corrects your books, and nothing posts that you haven't approved.
Most owners find out how the quarter went a month after it ends.
Your books are current tonight — and you can see how every number got there.
Daily aggregator pulls, plus drag-and-drop CSV or OFX for every institution the aggregators can't reach. Idempotent by design — re-import the same file and nothing duplicates.
Three layers, cheapest first: your deterministic rules, a classifier trained on your history, then a local model that reads your actual chart of accounts. Every suggestion carries confidence and provenance. Nothing posts itself.
The 90-second morning: approve the greens, adjust the yellows, teach it the reds. Commits pass native double-entry validation or they don't post.
Per-wallet lot tracking at satoshi precision. FIFO, LIFO, or specific identification. Self-transfers carry basis — not taxable events. Form 8949 falls out of your own ledger.
Consolidated or per-entity, branded, exportable. The Seal Mark on a report means every entry in the period is reconciled — proof, in the literal sense.
Talk to your books through any MCP client. OAuth-scoped, audit-logged, permission-enforced at the data layer. Agents read and summarize — they never post without approval.
Your data comes in. It never goes out. The ledger sits on your machine, and nobody can switch it off.
The same platform, packaged as an appliance for operators who want out of SaaS accounting. Plug in, configure your entities, and your books run on hardware you hold.
In development