Xero or Sage for the ledger, Google Drive for workpaper folders — encrypted, versioned tokens with a two-phase revoke on disconnect.