Multi-tenant SaaS · FP&A · Treasury

The FP&A-to-Cash
Bridge Your CFO
Has Been Missing

From GL actuals to cash positioning in one platform. K-Φ connects financial planning with treasury execution — no spreadsheets, no handoffs, no blind spots.

Explore the platform

Plan. Forecast. Execute.

Three pillars, one engine. K-Φ turns your financial data into actionable cash intelligence — from the general ledger all the way to the bank.

01

Plan

Import your P&L and Balance Sheet from any ERP. K-Φ auto-classifies GL accounts using a 4-pass engine with confidence scoring, mapping 297+ aliases across 9 ERP templates.

02

Forecast

Build cash flow statements with the indirect method. Apply DSO/DPO-aware flow rules, driver-based projections, and three-horizon views — actuals, forecast, budget — in one workspace.

03

Execute

Financial close gates, covenant monitoring, FVAL controls, and dual-admin approval. From forecast to treasury action — with full audit trail and structured process templates.

Bridging Two Worlds

FP&A teams plan in spreadsheets. Treasury teams execute in TMS platforms. K-Φ sits between them — structuring forecast data so it flows directly into cash management without manual handoffs.

Source
ERP / GL
Engine
K-Φ
Destination
Treasury / TMS

Built for Finance Teams

Enterprise-grade features. Mid-market simplicity. €10K/year flat.

Smart Mapper

7-pass auto-mapping engine with 297+ aliases. Supports SAP, Oracle, IFS, D365, NetSuite, Sage, QuickBooks, Xero, and Hyperion HFM templates.

GL Classification Engine

4-pass classification with confidence scoring. French PCG-aware. Automatic DR/CR swap detection and signed-inverse support for credit-positive ERPs.

Cash Flow Statements

Indirect method CFS built from imported P&L and Balance Sheet. Drill-down by GL account. Operating, investing, and financing activities with full subtotal control.

OLAP Dimensions

Slice by entity, currency, region, or any custom dimension. Multi-tenant architecture with per-tenant data isolation and structured logging.

Covenant Monitoring

Track financial covenants against live data. Automated alerts when thresholds approach. Full audit trail with correlation IDs.

Push API

POST /api/gl/ingest with SHA-256 hashed API keys. Process Templates for structured data exchange. Postman collection included.

Frequently Asked Questions

Product
What is K-Φ?

A multi-tenant FP&A and Treasury intelligence platform that transforms raw General Ledger data into consolidated financial statements, driver-based budgets, scenario analysis, cash flow forecasts, and Kyriba-ready export — automatically and in minutes.

How does data get into K-Φ?

Via a Universal Push API — one REST endpoint for any ERP. Pre-built mapping templates for SAP, Oracle, D365, NetSuite, Sage, QuickBooks, Xero, IFS. Also CSV/Excel upload via Import Wizard with a 7-pass Smart Mapper (297 keyword aliases). API keys enable automated scheduled feeds.

What financial statements are produced?

Balance Sheet, P&L, and indirect Cash Flow — auto-derived from a single GL import. Customizable via Statement Template Editor with industry presets (SaaS, Manufacturing), custom calculated rows (EBITDA, margins), and multi-version overlay with delta mode.

How does group consolidation work?

Full statutory consolidation: FX translation (closing/average/historical rates), CTA posting, intercompany elimination, minority interest, and cost allocation engine. Covenant monitoring with breach alerts included.

What does budgeting offer?

26 drivers across 6 categories: Revenue, COGS, Personnel, OpEx, Working Capital, and Treasury. Per-entity, per-period inputs with manual override capability. Multi-step approval workflow with full audit trail.

What is the Scenario Simulator?

10 business levers for what-if analysis: staffing, inflation, AR/AP terms, revenue, capex, debt, FX, cost optimization, custom GL shocks. Forward-looking from actuals with DSO/DPO averaging. PDF scenario reports and budget impact overlay.

How does forecasting work?

Forward-looking projections built from actual GL data. DSO/DPO/DIO averaging with configurable windows. Business Calendar engine (32 countries, 150+ sub-regions) drives payment timing and collection curves automatically.

How does K-Φ integrate with Kyriba?

Forecasts export in Kyriba's standard liquidity plan format. Budget codes map to Kyriba categories. The export includes entity, due date, currency, and amount — ready for direct import into Kyriba's cash forecasting module.

What KPIs are available?

30+ financial KPIs across liquidity, profitability, leverage, and efficiency. Covenant monitoring with configurable thresholds and breach alerts. All KPIs update in real time as you change scope or version.

What is the Financial Close Gate?

Period-locking workflow with task checklists, assignee tracking, and completion status. Forecasts are blocked until close tasks are validated. Every action recorded in the SOX-grade audit trail.

Security & Infrastructure
Where is my data stored?

On Render's Oregon (US) infrastructure. Each tenant gets a dedicated, encrypted database — your data is never commingled. AES-256-GCM encryption at rest, TLS/HTTPS in transit. Tenant deletion is atomic and permanent.

How is tenant isolation enforced?

Three layers: dedicated encrypted database per tenant, JWT-scoped application logic (no code path can access another tenant), and tenant-prefixed browser storage keys preventing cross-tenant leakage.

How is data encrypted?

AES-256-GCM with per-tenant keys derived via PBKDF2 + SHA-256 (10,000 iterations). Passwords hashed with bcrypt (12 salt rounds). API keys hashed with SHA-256 — plaintext never stored. Data decrypted only in memory during active use.

What authentication is supported?

Email + password (bcrypt), TOTP two-factor authentication (Google Authenticator, Authy), and SSO via Google, Azure AD, or Okta. Tenant owners can mandate 2FA for all users.

How does RBAC work?

Four-tier model: Owner, Admin, Editor, Viewer. Entity-level permissions restrict access per entity. Sensitive operations require dual admin approval. Every action logged in the audit trail.

How are brute-force attacks prevented?

Two-tier rate limiting (global + auth-specific), constant-time password comparison, generic error messages, and dummy hash computation for non-existent accounts to prevent timing-based enumeration.

What audit trail exists?

SOX-grade, append-only audit log in each tenant's encrypted database. Every action recorded with timestamp (UTC), user email, action type, and structured JSON details. Cannot be modified or deleted through the application.

How is the platform monitored?

Structured client + server logging, health check endpoint with degradation detection, 90-day uptime SLA tracking, 5-phase smoke tests after every deploy, weekly performance benchmarks, automated code review (twice weekly), boot-time syntax checking, error ring buffer with spike alerting, and daily digest emails.

What testing coverage exists?

29 test suites, 1,000+ automated tests: unit, integration, regression, source integrity, DOM integrity, and security tests. Run on every push via GitHub Actions CI. Every shipped bug gets a corresponding regression test.

What about GDPR?

No personal data processed beyond login credentials. No third-party analytics, tracking, or advertising. Tenant deletion is atomic — one operation removes everything. EU region deployment available on request.

Ready to Bridge the Gap?

Stop emailing spreadsheets to treasury. Start flowing structured forecast data in real time.

Launch the platform