Singapore (ap-southeast-1) on Neon (Postgres) and Vercel. All transit is over TLS. Backups are encrypted and retained for 30 days.

See the privacy policy for the full sub-processor list.

Yes. Quotations, invoices, receipts, and expenses include VAT (7%) and withholding-tax fields out of the box. Tax IDs live on every contact and on your own organization, so they appear on every document automatically. Recurring invoices keep the same tax treatment when they auto-issue.

Export your contacts and historical invoices as CSV from your current tool, then import them via FirmWorks’s contact and document tools. For larger migrations, email hello@firmworks.com and we can help.

Yes. Every database query is filtered by your organization id server-side. The isolation is locked in by integration tests, not just convention — a logged-in user from another organization cannot see anything from yours, even if they guess your URLs.

That depends on the module. Documents, projects, kanban boards, and channels respect the role-based access you configure in Settings. Notes have a per-note visibility toggle, so a draft can stay private while an SOP is shared with the entire org.

No. Sign up for a 14-day Pro trial with email and password — no card on file. All modules are unlocked during the trial; you only add billing if you decide to continue on a paid plan.

Plans bill per organization, not per seat: ฿290/mo Starter (up to 3 seats — documents, projects, notes, boards), ฿990/mo Pro (up to 15 seats — adds HR, internal chat), ฿2,490/mo Business (up to 50seats — adds audit log, SSO, custom roles, priority support).

See the pricing section for the side-by-side bundle math vs licensing five separate tools.

No. Each plan ships with a seat cap included in the org-level price. Within the cap there is no per-seat charge. To go above the cap, upgrade to the next tier rather than topping up seat-by-seat.

You can export your full workspace as CSV (per module) for up to 30 days after cancellation. After that we delete it per the schedule in our privacy policy. Encrypted backups roll over in the same 30-day window. Billing records are retained as long as Thai tax law requires (up to seven years).

The full data-handling commitment lives in our Data Processing Addendum.

Yes — every module has an Export CSV button on its index page (Documents, HR, Projects, Notes). Files are CSV-escaped and download as <module>-<yyyy-mm-dd>.csv. You don’t need to cancel to export.

No formal SLA on Trial or Starter; we aim for 99.5% but won’t guarantee it. A 99.9% custom SLA is available on the Business plan — email sales@firmworks.com. The live operational view sits on /status.

Org owners and admins. Owners can also turn on an email-domain allowlistin Settings → Workspace, so invitations can only go to addresses on your approved domains — useful when you want to lock invites to your corporate email rather than personal addresses.

Not yet. All workspaces today live on the canonical FirmWorks domain. Bring-your-own domain is on the roadmap as a future item.

For procurement context (security questionnaires, custom SLA, on-premise needs), email security@firmworks.com.

A typical invoice for a ฿100,000 service line: VAT 7% adds ฿7,000, withholding tax 3% subtracts ฿3,000 at the customer’s end — FirmWorks computes both fields automatically and prints the customer’s tax ID + your tax ID on the PDF. Recurring invoices keep the same VAT/WHT treatment when they auto-issue.

Worked examples per document type live in the documents & tax help page.

Stripe (billing), Resend (transactional email), Vercel Blob (file storage in Singapore), Vercel AI Gateway (AI inference), Neon (Postgres), and Better Auth (auth). Zapier, Slack notifications, and QuickBooks CSV export are coming with the per-org API keys work in flight.

Full list with details on the integrations page.