Bank Accounts Management

Bank accounts are where your financial data meets the real world. AI-native ERP manages three types of bank accounts -- company accounts, vendor accounts, and employee accounts -- with encrypted credential storage, GL integration, and verification workflows that keep your banking operations secure and auditable.

Company Bank Accounts#

Company bank accounts represent the operating accounts your business uses for payments, collections, and payroll. Each account stores full banking details (bank name, account number, routing number, IBAN, SWIFT code), all encrypted at rest using AES-256-GCM encryption. You classify accounts by type (checking, savings, credit card, line of credit) and usage (operating, payroll, tax, savings).

The critical integration point is the GL account link. Every company bank account maps to a GL account from your chart of accounts (typically in the 1000-1099 range). This mapping powers the entire bank reconciliation process -- when a bank statement line is matched to a GL transaction, the system knows exactly which cash account to reconcile.

Vendor Bank Accounts#

Vendor bank accounts store the payment details needed to send money to your suppliers. You can add multiple accounts per vendor, set a default for each currency, and track verification status. Bank account changes go through approval workflows before they become active for payments, protecting against payment fraud.

Verification workflows support multiple methods: micro-deposit verification, bank letter confirmation, or manual verification with documented evidence. Until an account is verified, it cannot be used for automated payment batches, adding a layer of protection to your payment operations.

Employee Bank Accounts#

Employee bank accounts handle payroll direct deposit and expense reimbursements. Like vendor accounts, they support multiple accounts per employee, default designation, and verification workflows. The system routes payments to the correct account based on the payment type and employee preferences.

Security Architecture#

All bank account numbers, routing numbers, and IBANs are encrypted using AES-256-GCM with organization-specific encryption keys derived from a master secret. This means bank details are never stored in plain text, never exposed in chat logs, and never visible to unauthorized users. Credential entry happens through the secure admin dashboard, not through chat interfaces, preventing accidental exposure.

Bank account operations flow through risk-based approval workflows. Creating a new account is a standard operation, but modifying banking details on an existing account triggers higher-level review -- reflecting the real-world risk of payment redirection attacks.