Product concept · v0.1

Accounting for people who would rather not.

Quiggy keeps a business's books permanently done. It reads receipts, bank lines and invoices as they happen, posts them itself, files with the tax office on time, and only talks to you when something needs a human. Underneath, it is a full double-entry ledger a Big Four auditor would trust. On top, it speaks plain English.

Always posted

Nothing waits in a shoebox. Every receipt, card swipe and bank line is in the books within minutes, with a confidence score and a paper trail.

Never late

VAT returns, MTD submissions and annual accounts are drafted from live books and submitted through official APIs after sign-off. Late filing stops being possible.

Plain by default

No debits, credits or chart of accounts unless you ask. "Will you use this for more than a year?" is how Quiggy decides what's an asset.

First customer small business with an accountant Also for firms up to Big Four scale Truth lives in our ledger, synced to Xero / QuickBooks Autonomy act, interrupt only for exceptions Firms get white-label Rails bank feeds · own cards · invoicing · bills · payroll Regulation partner-first, own licence later v1 markets Malta · EU · UK · US Team founder-led, deliberately small

The flip

Every accounting tool digitised the ledger. Quiggy digitises the accountant.

Xero and QuickBooks made bookkeeping software. The person still has to do the bookkeeping. Quiggy inverts the default: the books are done unless Quiggy says otherwise.

How it works today
How Quiggy works
You open the app to do your books.
The books are done. You open the app to see what Quiggy needs from you, which is usually nothing.
Receipts pile up, then you spend a weekend matching them.
One photo or one email is enough. Quiggy reads it, matches it to the bank line or card swipe, posts it, and archives the image for seven years.
You pick a category from a chart of accounts you don't understand.
Quiggy asks a plain question only when it can't tell: "Is this for a client, or for the team?" The real account is chosen underneath.
A reminder tells you the VAT return is due Friday.
The VAT return is already drafted from live books. You (or your accountant) tap approve, Quiggy submits it, and stores the receipt from the tax office.
Your accountant asks for "the missing documents" every quarter.
Your accountant sees one queue across all clients containing only the exceptions. Close takes minutes, not days.
Reports explain what happened last month.
Quiggy tells you what happens next: cash in eight weeks, the tax bill you're building up, the client who always pays late.

Capture

Two ways in. Both end with a posted entry.

The single receipt on your phone and the shoebox of a hundred are the same pipeline; the second just runs it in bulk without asking you anything it can work out itself.

QuiggySat 12:41
TA' KRIS RESTAURANTSliema
2× Lunch menu38.00
2× Sparkling water6.40
TOTAL EUR44.40
VAT 18% incl.6.77
VAT No.MT 1234-5678
You said
"Lunch with Sarah from Northlight about the Lisbon kickoff."
Amount you typed
44.40
Amount on receipt
44.40 ✓ match
Filed as
Client entertainment
Linked to
Northlight · SKO 2027
Matched to
Card ···4471, 12:38
Posted. Nothing else to do.

Flow one: a single receipt, ten seconds

Photograph the receipt

Edge detection, glare removal and multi-page capture happen on-device. Thermal receipts and handwritten ones both work.

Say what it was for, in your own words

Voice or text. "Lunch with Sarah about the kickoff" is enough. If Quiggy already knows the merchant and the card swipe, you can skip this entirely.

Type the total

Your number is checked against the number Quiggy read. A match posts instantly; a mismatch shows both and asks which is right. It is the cheapest quality control in accounting.

Quiggy posts it

Account, VAT treatment, currency, client or project, and the matching bank or card line are all resolved. The image is sealed in write-once storage with a hash, which is what an auditor wants to see.

You see a confirmation, not a form

If confidence is high, the screen just says "Posted." If not, a single plain question appears. Never a dropdown of 200 accounts.

Flow two: the shoebox

Connect a mailbox, drop a folder of scans, or photograph a stack. Quiggy runs the same pipeline a thousand times, then hands you one short list.

Ingest
  • Gmail / Microsoft 365 comb (read-only, receipts and invoices only)
  • Forward-to address per entity
  • Bulk photo or scanner upload
  • Supplier portals (Amazon, Uber, SaaS invoices)
Read
  • Vision model extracts merchant, date, lines, totals, VAT, currency
  • Deduplicates against everything already seen
  • Flags non-receipts and personal spend
Match
  • Pairs with bank feed and card transactions by amount, date, merchant
  • Splits and tips handled
  • FX resolved to the rate the bank actually used
Decide
  • Account, tax code, project from the business's own history
  • Confidence score per field
  • Rules learned from every correction
Post & queue
  • High confidence: posted, sealed, done
  • Everything else: one "needs you" pile, grouped so ten similar items become one question

How it decides

Act on everything. Interrupt for exceptions.

The whole product rests on the "needs you" pile being short and every question in it being answerable by a normal person in one tap.

Needs you · 4 of 212 this week98% posted alone
Apple Store, Valletta
Above your usual spend · could be equipment
Will you use this for more than a year?
€2,349.00
Booking.com, 3 nights, Bucharest
Dates match your calendar, but no client linked
Client event, or personal?
€612.00
Unknown merchant "KFT SZOLG"
No receipt found in mail or camera roll
What was this? A photo of the receipt also works.
HUF 48,900
12 Uber rides, September
Grouped: same pattern, no project tagged
All for the Bucharest event? Tap once to tag all twelve.
€187.30

When Quiggy interrupts

confidenceAny field below the threshold the business has earned. Thresholds tighten as the model gets corrections right, and per category, so coffee posts itself long before equipment does.
materialityAnything above a per-entity amount, or that would change the asset register or VAT position materially, regardless of confidence.
personalMerchant type, weekend timing, or a pattern that looks like personal spend on a business card. Asked kindly, once.
taxMissing VAT number on a receipt over the reclaim threshold, cross-border reverse charge, US sales-tax ambiguity.
duplicatesSame amount and merchant within a window, or a receipt that matches two bank lines.
neverQuiggy never asks a question that can be answered from data it already holds, and never asks the same question twice for the same merchant.
What the owner sees
Lunch with Sarah · €44.40
Client entertainment for Northlight, SKO 2027. Paid with the team card.
VAT of €6.77 is not reclaimable on entertainment in Malta, so Quiggy has filed the full amount as cost. Tap to see the accounting.
What the accountant sees
AccountDebitCredit 6210 Client entertainment44.40 2110 Company card · ···447144.40 JE-2026-09-00417 · MT VAT 18% blocked (Art. 22) · doc sha256 9f3a…c21e · posted by Quiggy, confidence 0.97 · unreviewed

Who it's for

One hierarchy from a freelancer to a Big Four firm.

The data model is firm → entity → person from day one. A sole trader is simply a firm of one with one entity. A Big Four office is a firm with four hundred entities and a white-label login page.

Firm

The accounting practice

Bookkeeping firm, accountancy practice, Big Four office, or the business itself when it has no accountant.

  • White-label: own domain, brand, emails
  • One review queue across every client
  • Period close and filings, prepared by Quiggy, signed by staff
  • Staff roles, engagement scoping, client billing
  • Firm-wide rules ("we always treat X as Y")
Entity

The legal business

A company, a sole trader, a branch. Multi-entity groups consolidate upward.

  • Own ledger, chart, tax registrations, fiscal year
  • Own bank feeds, cards, mailboxes
  • Own data residency region
  • Own audit trail and document vault
  • Two-way sync to Xero / QuickBooks / Sage if the firm wants it
Person

Owners, staff, spenders

Anyone who spends money or needs to see it.

  • Owner: everything, in plain language
  • Spender: capture only, card in wallet, no access to books
  • Approver: bills and expenses over a limit
  • Viewer: investors, board, lenders
  • Accountant: the real ledger, always
white-label, review, sign-offledger, rails, filingscapture, approve, see

Modules & pricing

Pay for the modules you switch on. Everyone gets the core.

Modules are how a freelancer and an enterprise use the same product at different prices. The core is deliberately generous, because the core is what makes people trust the books.

Core · always on
captureReceipts, invoices, mailbox combPhoto, voice, email, scan, forward
ledgerDouble-entry ledger & audit trailImmutable, multi-currency, plain-language layer
feedsBank feedsOpen Banking, every business account
pileThe "needs you" pileExceptions only, grouped
syncXero / QuickBooks syncTwo-way, so accountants keep their tools
Money
cardsQuiggy cardsPhysical & virtual, per person, per project, spend limits; the swipe is the receipt
invoicingInvoicing & getting paidCard, bank transfer, direct debit; automatic chasing
billsBills & approvalsSupplier invoices, approval chains, scheduled payment runs
payrollPayrollPer-country partners; Malta in-house
fxMulti-currency accountsHold, convert, pay in 40+ currencies
Compliance
filingTax filingVAT / MTD / sales tax, submitted via official APIs after sign-off
closePeriod close & annual accountsDrafted continuously, locked at close
assetsFixed assets & depreciationDecided by plain questions
groupMulti-entity consolidationIntercompany, eliminations, group reporting
vaultDocument vault & retentionWORM storage, legal-hold, 7–10 year schedules
Firm
brandWhite-labelOwn domain, brand, emails, app icon
queuePractice review queueAll clients, one inbox, SLA timers
practicePractice managementOnboarding, engagement letters, deadlines, client billing
enterpriseSSO, SCIM, audit exportOkta, Entra, Google; SIEM feeds
Intelligence
forecastCash forecast8 and 13 weeks, from real payment behaviour
taxTax provision live"You owe €4,120 so far this quarter"
advisorAsk QuiggyQuestions in plain language over your own books
benchBenchmarksAnonymised, opt-in, across the firm's clients
Solo
€19/entity/mo
  • Core, one entity, one person
  • Filing module included (the promise matters most here)
  • Cards and invoicing as add-ons
Team
€79/entity/mo
  • Core, up to 25 people
  • Any Money and Compliance modules, priced per module
  • Accountant seat free, always
Firm
€12/client entity/mo
  • Firm modules, white-label, review queue
  • Volume steps at 100 / 500 / 2,000 entities
  • Firm resells or bundles into its fee
Enterprise
Annualcontract
  • Multi-entity, consolidation, SSO, SCIM, dedicated region
  • Custom retention and audit exports
  • Option for own-licence banking later

Prices are indicative placeholders for the model, not a proposal. Usage that costs us real money (card interchange, payment processing, per-filing fees, payroll partner fees) is passed through with a margin so pricing scales with the customer rather than punishing small ones.

Stack

Built for one very productive builder and an auditor.

One language end-to-end, managed services wherever a vendor already carries the compliance burden, and a purpose-built ledger at the centre. Picks marked "to confirm" are candidates whose terms or regional coverage are being confirmed.

Clientswhat people touch
Expo (React Native)iOS + Android from one codebase; camera, wallet, push; EAS for builds and OTA updates
Next.js on VercelWeb app, firm portal, white-label domains; already in use by the founding team
Tailwind + shadcn/uiDesign system shared across web and RN via Tamagui or NativeWind
Language & repoone brain
TypeScript everywhereTurborepo monorepo; shared types from ledger to phone
tRPC or GraphQL (Pothos)Typed API; GraphQL if firms will integrate against us
Drizzle ORMThin, SQL-honest; migrations under review
ZodEvery boundary validated, including AI outputs
Ledger corethe truth
TigerBeetlePurpose-built double-entry financial database; debits always equal credits by construction, millions of transfers/sec, built for audit
PostgreSQL (AWS Aurora or Neon)Everything that isn't a balance: documents, rules, people, firms; row-level security per tenant
Event log (append-only)Every posting is an immutable event with actor, model version, confidence, evidence hash
TemporalDurable workflows for ingestion, matching, period close and filings; retries and audit of every step for free
Intelligencethe accountant
Claude (Anthropic API)Vision reads receipts; tool use posts entries; plain-language layer and "Ask Quiggy"; zero-retention enterprise terms
Azure Document IntelligenceDeterministic OCR baseline for line items and cross-checking the model to confirm
Braintrust or LangSmithEval suites: every correction a user makes becomes a test case
pgvectorMerchant and entry similarity for "you've seen this before"
Money railsrented licences
Bank feedsTrueLayer (UK/EU), GoCardless Bank Account Data (EU), Plaid (US, UK); one adapter interface to confirm: Maltese bank coverage
Cards & accountsStripe Issuing + Treasury (US/UK/EU) or Swan (EU BaaS, Paris EMI); Modulr for UK payments to confirm
Getting paidStripe Payments; GoCardless direct debit; Wise Platform for FX and multi-currency
PayrollGusto Embedded (US), Staffology or Employment Hero (UK); Malta rules built in-house to confirm
KYC / AMLSumsub + ComplyAdvantage, owned by us so the customer relationship is ours when we take our own licence
Tax & filingthe promise
HMRC MTD APIsVAT and Income Tax Self Assessment; Quiggy registered as recognised software
Malta CfRVAT returns and recapitulative statements; electronic channel to confirm, form-fill automation as fallback to confirm
Avalara or VertexUS sales-tax determination and returns; EU VAT rates and OSS
Country packsChart, tax codes, filings and calendar per jurisdiction as data, not code; this is how "worldwide" stays achievable
Integrationsmeet them where they are
Xero + QuickBooks Online, directTwo-way sync built by us; these two are the market
Codat or RutterUnified API for the long tail: Sage, NetSuite, Exact, FreeAgent
Nylas or direct Gmail / GraphMailbox comb with scoped, read-only, receipts-only access
Public API + webhooksFirms and enterprises will build on us; document it from day one
Platform & securitythe audit
AWS, EU + US regionseu-central (Frankfurt) default, us-east for US entities; Terraform; per-tenant KMS keys; S3 Object Lock for documents (WORM)
WorkOSSSO, SCIM, directory sync, audit logs as a service; the enterprise checklist in one vendor
VantaContinuous SOC 2 Type 2 and ISO 27001 evidence; already in use by the founding team
Datadog + SentryObservability, security monitoring, error tracking
1Password / DopplerSecrets; nothing in env files
Postmark, Twilio, ResendTransactional email and SMS with DKIM per white-label domain

Why TigerBeetle and not "just Postgres": a ledger that cannot go out of balance is the difference between a bookkeeping app and financial infrastructure. It also makes the own-licence step later far cheaper, because the same ledger that holds a client's books can hold real customer funds.

Compliance by design

Every framework you named maps to an architecture decision, not a policy document.

SOC 2 Type 2 and ISO 27001 are the entry ticket for firms. GDPR is table stakes in the EU. HIPAA only matters if a firm's clients include US healthcare practices, so it is designed in but switched on per entity.

Decision
What it means in Quiggy
Frameworks served
Immutable ledger and event log
Nothing is edited or deleted; corrections are new reversing entries with an actor and reason. Every AI decision records the model version, prompt version, confidence and the evidence hash it relied on.
SOC 2ISO 27001Audit standards
Tenant isolation
Row-level security in Postgres, per-tenant KMS encryption keys, separate ledger namespaces in TigerBeetle. A firm's clients are isolated from each other, not just from other firms.
SOC 2ISO 27001HIPAA
Data residency per entity
Each entity chooses its region at creation. EU data never leaves the EU region, including AI inference (Anthropic and AWS EU endpoints).
GDPREnterprise DPAs
Retention versus erasure
Books must be kept 7–10 years; people have the right to erasure. Personal data is pseudonymised so an erasure request scrubs the person while the ledger stays intact and compliant.
GDPRTax law
Least privilege by role
A card spender never sees the books. A viewer never sees documents. Every access is logged and exportable to the customer's SIEM.
SOC 2ISO 27001HIPAA
Enterprise identity
SSO (SAML/OIDC), SCIM provisioning, MFA enforced, session policies per firm, via WorkOS.
SOC 2ISO 27001
Vendor chain
Every vendor holds SOC 2 / ISO and signs a DPA; BAA-capable vendors chosen wherever HIPAA might apply (AWS, Anthropic enterprise, Twilio). Vendor list is itself audited in Vanta.
SOC 2GDPRHIPAA
AI governance
Human sign-off on every filing and on every posting above materiality; model outputs validated by schema; evals run on every model change; a customer can turn autonomy down per category.
EU AI Act readinessSOC 2
Continuous evidence
Vanta monitors AWS, GitHub, Vercel and identity continuously so the Type 2 observation window runs while you build, not after.
SOC 2 Type 2ISO 27001

Regulatory path

Rent the licence first. Design as if you'll own it.

Cards, accounts and payments are regulated money. Partners let Quiggy ship in months. The architecture keeps the door open to an own licence when a Big Four-scale customer asks for it.

Stage 1 · Partner-firstLaunch → ~year 2

Technical service provider

  • Stripe or Swan hold the funds and the licence; Quiggy is the experience
  • Quiggy owns KYC data, ledger, customer relationship
  • No regulatory capital, no MFSA application yet
  • Constraint: partner's country coverage and margins
Stage 2 · Agent / distributorWhen volume justifies it

Registered agent of a licensed EMI

  • Quiggy appears on the register, can onboard and service customers directly
  • Better economics, shared compliance function
  • First AML officer, first compliance hire
  • Proves the operating model regulators will inspect later
Stage 3 · Own licenceIf a Big Four-scale client requires it

EMI licence, MFSA (Malta)

  • Passportable across the EU/EEA; UK via FCA separately
  • Safeguarded client funds, own BINs, own interchange
  • Capital, board, three-lines-of-defence, 12–18 months
  • Only worth it when funds under management make the margin matter

What the architecture does now so Stage 3 is a swap, not a rebuild

Every money movement goes through one internal "rail" interface: issueCard · openAccount · pay · collect · fx. Stripe and Swan are adapters behind it. When Quiggy holds its own licence, the adapter becomes Quiggy's own core banking on the same TigerBeetle ledger, and no product surface changes. KYC, AML screening and transaction monitoring are run by Quiggy from day one (Sumsub, ComplyAdvantage), so the regulator sees a compliance function that already exists rather than one being invented for the application.

Roadmap

A pilot in Malta and the UK first, then the promise, then the world.

Ordered so each phase produces something a real accounting firm will pay for, and so the SOC 2 Type 2 observation window is running from the first commit.

Phase 0~6 weeks

Foundations. Concept locked, design system, compliance scaffolding, first firm signed as design partner.

  • Brand and design system for Quiggy and the white-label shell
  • Monorepo, AWS + Vercel, Vanta connected, policies drafted
  • TigerBeetle + Postgres ledger with the plain-language layer over a Malta chart of accounts
  • Design-partner firm interviews: what does their review queue look like today?
Phase 1~4 months

Books that do themselves. Capture, matching, posting and the firm queue, for Malta and UK entities.

  • Mobile capture with the typed-total cross-check
  • Mailbox comb and bulk upload
  • Bank feeds via TrueLayer / GoCardless
  • Autonomy engine, "needs you" pile, plain ↔ ledger toggle
  • Xero and QuickBooks two-way sync
  • Firm review queue, first white-label domain
Phase 2~4 months

Never late, and the swipe is the receipt. Filing and cards make the promise real.

  • HMRC MTD VAT submission; Malta VAT returns
  • Period close, annual accounts drafts
  • Quiggy cards via Stripe Issuing / Swan with instant receipt prompts
  • Invoicing and getting paid
  • SOC 2 Type 2 observation window complete; report issued
Phase 3~6 months

Scale outward. US, EU country packs, payroll, bills, forecasting, enterprise identity.

  • US entities: Plaid, Avalara sales tax, US chart
  • Country packs for the largest EU markets
  • Bills and approvals, payroll partners, cash forecast
  • SSO / SCIM, ISO 27001 certification
  • Public API and webhooks
  • Stage 2 regulatory conversation begins

Open decisions

Still yours to call.

None of these block Phase 0. Each one changes something in Phase 1 or 2.

Who is the design partner?

A practice with 100–300 clients shapes the review queue fastest. Larger firms join once there is something running to show.

Is our own company entity number one?

Multi-currency projects, expenses across countries and a SOC 2 audit already underway make it a strong first entity, and dogfooding fixes the capture flow fastest.

How opinionated is the plain-language layer per country?

Malta and the UK differ on what is reclaimable and depreciable. The questions Quiggy asks are country-specific data. Who writes and signs off those packs: us, or the firm?

Card programme geography

Stripe Issuing covers US, UK and much of the EU from one integration; Swan is EU-native. Decide by where the first hundred card-carrying customers will be.

Pricing the firm tier

Per client entity is simplest. Firms may prefer a platform fee plus usage. Worth testing on the design partner before Phase 2.

Name and brand register

Quiggy is warm and memorable for owners. Firms will show it white-labelled, but enterprise buyers will see it on the contract. Check trademark availability in EU, UK and US early.