Audit-grade by construction

Colma holds the parts of your revenue process that have to be exactly right: quotes, pricing, and approvals. We've designed it so that correctness and accountability come from how the system works, rather than from habits your team has to maintain. Here's what that means in practice, for the Finance owner or security reviewer who needs to sign off.

On the record by default

Colma keeps an append-only audit log, which means every quote edit, approval decision, signature, and override is recorded as it happens and nothing is ever overwritten. Documents and quotes are stored as immutable versions, so a given version is a fixed thing you can point to, and it can't be quietly changed later. When you need to know what a quote said at the moment it was approved, and who approved it, the answer is in the record rather than in someone's memory.

Deterministic where it matters

Approval evaluation is rule-based and reproducible: the same deal facts produce the same approval chain every time, and there's no model guessing at who should sign off. AI helps draft the quote and propose the configuration, but your rules decide whether it can be sold and who needs to approve it. Guardrails catch configurations that can't be sold before they ever reach a customer, and every block comes with a reason a person can actually read.

Exact money

Pricing math is decimal-exact, so the numbers a customer signs are computed precisely, including totals, discounts, proration, and credits. Each document carries a single currency, which means there's never an implicit conversion hiding inside a total. Price history is effective-dated, so a quote always reflects the prices that were in force when it was built.

Access and overrides

Access is role-based. Force-approve exists for the deal that's genuinely stuck, but it's limited to roles with the standing to use it, it requires a written reason, and it's logged as an explicit override. Colma never records a synthetic approval in place of a real one, so an override always reads as what it actually was.

Going deeper

We walk through hosting, encryption, single sign-on, and subprocessors directly with your reviewer, and we're glad to work through security questionnaires and a deeper architecture review as part of that conversation. Ask for a demo and tell us who needs to sign off, and we'll bring the detail they need.