We recently had an issue of a client receiving 6 verification codes to their email that they did not request. When asking for more details from Financial Cents I was informed that there is no audit trail of activity of logins. Without this detail there is no way to know if any unauthorized person gained access to sensitive client information. As a CPA I am required to have an information security plan in place, but wouldn't even know if a qualifying even transpired within FC if there is no way to investigate potential unauthorized access to the client's information.