Vendor Management Support

Treasury Software understands and respects the needs of businesses of all sizes to institute a comprehensive risk management process to govern their third-party vendor relationships.


While we would like to complete and assist with all vendor management due diligence inquiries, it would not be economically feasible based on our pricing model.

Our software is aggressively priced at the utility and desktop productivity level and cannot support the additional costs associated with this pre-sales activity.

We welcome the opportunity to provide you with as much information as possible in a self-service methodology (below):

Service Organization Reports (SOC, SSAE 16/18 and SAS 70)

Service Organization reports are often initially requested by our client's purchasing department or vendor management departments as a condition of licensing.

As Treasury Software is a software provider and not a service organization - these reports are not applicable.
We maintain software certifications and attestations with multiple entities - including Microsoft and Intuit.

Our software has been tested and is listed at the following locations:
Intuit Developer - QuickBooks Desktop
Intuit Developer - QuickBooks Online
Microsoft Partner

It should be further noted:

• Treasury Software is an installed application at our client locations - it is not a web-based application.
• There are no central points of failure that would prohibit full use or access of the software for existing clients.
• There are no cloud-based web components or data storage that we provide, that enable or hinder use of the software.
• We cannot access our clients' data or systems.
• The security of the software is managed within the client's environment.

For additional detailed information, see below


Financial Information

While we are a privately held corporation and do not release financial statements, relevant financial information is available from third-party sites, including Dun & Bradstreet.

 

Insurance

Treasury Software maintains insurance coverage in accordance with our corporate policies.
Treasury Software can provide a Certificate of Insurance to licensed clients upon request, at no cost.
Adding a licensed client / qualified partner as an additional insured may be obtained at an annual cost of $275/year (to help offset administrative costs).

Policies Online
Our IT Processes and many business policies are available at
(a listing of the contents is below):
http://www.treasurysoftware.com/public/Policies/Policies.pdf


Table of Contents (all publicly available, see the link above)
1. Access Control Policies / Procedures
2. Segregation of Duties Policies / Procedures
3. Remote Access Policy
4. Asset Management Policies / Procedures
5. Antivirus, Malware Policies and Procedures
6. Confidentiality Agreements / Non-Disclosure Agreements
7. Change Management, Change Control Policies and Procedures
8. Audit, Compliance Policies and Procedures
9. Data Backup Policies / Procedures
10. Data Destruction / Disposal Policies / Procedures
11. Application Development Policies and Procedures
12. Secure Coding Policies and Procedures
13. Email Use and Security Policies / Procedures
14. Encryption Policies / Procedures
15. Human Resource Screening Policies / Procedures
16. Human Resource Termination Policies / Procedures
17. Security Awareness Training Policies and Procedures
18. Incident Response Policy
19. Information Security Policies / Procedures
20. Social Media, Mobile Media, Device Policies and Procedures
21. Network Security Management Policies and Procedures
22. IT Operations Policies / Procedures
23. Patch Management Policies and Procedures
24. Physical Security Policies / Procedures
25. Risk Management / Risk Assessment Program Policies / Procedures
26. Data Retention Policies / Procedures
27. Third Party Management Policies / Procedures
28. Customer Complaint Handling Process
29. Business Continuity Plan
30. Compliance Program

End Use License Agreement (EULA)

As a shrink-wrap software developer, Treasury Software provides a standardized license agreement (EULA) for all of our clients - and is publicly available. Based on our volume, Treasury Software is unable to alter this document or supply individual contracts.

 

Small Business Enterprise (SBE) company and Diversity

Our goal is to promote diversity in all aspects of our company - from our staff to our vendors.

As a Small Business Enterprise (SBE) company, we are sensitive to proactively including entities that are minority-owned, women owned, veteran owned, LGBT-owned, service disabled veteran owned, historically underutilized business, and small business enterprises as suppliers and professional service providers.

 

Banking Community Involvement and Honors

We are not just a software company - we are actively involved in the banking and ACH community.

We present at NACHA (the national association) conferences, XML initiatives, and regional ACH conferences. Treasury Software is a member of the NACHA Alliance (formerly CEBP).

In October 2016, we became a NACHA Preferred Partner for ACH enablement and integration. Please visit the NACHA Preferred Partner page for more information on the program and announcement for details on our work with small and mid-sized businesses.


We're also active in the general banking and financial community, presenting to the Association for Financial Professionals regional chapters, as well as maintaining our relationships with key banks, such as M&I Bank (now BMO Harris Bank) - since 2004.


Recently, we added US Bank (the 5th largest bank originator of ACH transactions in the US) to our list.

View Treasury Software on US Bank (7th paragraph)

 

 

Independent Certifications

Microsoft Certified since 2008. Certification includes: --Software Testing --Client Surveys --Client References

View Treasury Software's Profile on Microsoft

QuickBooks Silver Developer since 2011. Certification includes: --Software Testing --Intuit client support from the Intuit Marketplace

View Treasury Software's Profile on Intuit

Reviews and Testimonials

We are proud of our product lines and the support that we provide.

We trust that this is self-evident in the reviews that are posted at:
Google Reviews
Reviews.io
The sites noted above are unfiltered and contain all comments posted.

In addition, you can access Testimonials.

Are Treasury Software solutions certified for Sarbanes-Oxley, SSAE 16 & 18, SAS70 and SOC?
Treasury Software solutions can help an organization's processes become compliant by assisting in the internal controls and documentation of the financial processes.

However, Sarbanes-Oxley, SSAE 16 & 18 for Service Organizations and SAS70 (Statement of Accounting Standards No. 70, American Institute of CPAs) cover control processes and Service Organization Controls only - not software.

These acts /compliance standards do not approve or set standards for software compliance. Compliance under the act is for internal control processes only (not software).
Software products by themselves cannot be compliant.

History:
SAS70 (Statement of Accounting Standards No. 70) was developed by the American Institute of CPAs (AICPA) as a standard audit approach for service companies to use with their customers instead of customers individually auditing the services companies.

On June 15, 2011, the SSAE 16 (Statement on Standards for Attestation Engagements No. 16) replaced the SAS70. The SSAE 16, Reporting on Controls at a Service Organization covers examining a service provider’s controls and rendering an opinion for the provider’s customers. SSAE 16 is also referred to as Service Organization Controls (SOC).

On May 1, 2017, the American Institute of CPAs (AICPA) replaced SSAE 16 with SSAE 18. While there were many additional areas of update - one major point was the inclusion of 'subservice' organizations.
A service organization is an entity that provides services (hosting, payroll processing, etc...) to another entity. A subservice organization goes one level deeper - a service entity used by the original service organization to perform services.

As Treasury Software is not a service or subservice organization, it does not fall within the scope of these standards.
Treasury Software obtains certification from independent software testing agencies in conjunction with its Microsoft Certified Partner status.