Controls a controller will sign off.

ProfitKeel checks the configuration before a run starts, proves conservation during the run, and keeps a record of who changed what.

• 75 configuration checks before every run. Errors stop the run before it begins.
• Reconciliation to the ledger, stage tie-outs and pool closures on every run.
• Close window: a locked model refuses configuration changes. Emergency changes need an admin and a written reason, and are logged.
• Row-level security: people see only the results for the part of the hierarchy they are entitled to.
• Roles for administrators, analysts, approvers, report readers and automated services.
• Results are read-only. Nobody edits a published number by hand.