Archives For November 30, 1999

Following on from the blog post two weeks ago, we’ve made some more improvements. Today, the employees tab in the policy editor gets an overhaul, and is now called the people tab. Here’s a look at what has been upgraded:

New! Multiple final approvers. Whereas we used to limit you to select only one final approver, now you can just construct your report approval/forwarding chains and set the final approvers in the chains to forward to “No one” – this lets us know they are at the end of the chain; the final approver for this chain. Your existing policies will automatically be updated to match this new system.

Multiple administrators. Now there’s no limit on adding other administrators to the policy, and they can now manage everything in the policy: people, categories, tags, limits, etc, and even go on to add other administrators.

Multiple administrators means multiple accountants. Whereas previously, accountant selection was done by a single drop down selection menu, it is now done by just setting a person as one of the administrators.

Forwards-to and submits-to separation. Now each person can be set to submit their reports to one person, and be set to forward their reports to another, so when they don their report-approving hat, their approved reports will be forwarded to a different person, for the next level of approval.

Simplified layout. If they’re in the table, they’re in your policy. No more extra checkboxes for submitters or approvers.

Sync now button for QuickBooks & Google Apps. We’ve added a sync now button which syncs your employee list from QuickBooks or Google Apps, whereas before these people were just (somewhat confusingly) listed in the table even if they weren’t in the policy.

Add person window. This allows you to choose the person’s submit-to and forwards-to settings, gives you more control over sending emails, and makes it more clear that you can add multiple people at once.

Moved CC list. The people on your CC list have been moved into the main table, and set as administrators. All administrators are automatically CC’ed on every report that uses the policy.

As always, let us know what you think of these latest changes, by emailing help@expensify.com, or just commenting here.

I just read this article about how someone made a Firefox extension to steal sessions from popular websites. Are you kidding me? Security isn’t an easy thing, I’ll admit. And maybe we take security to the extreme. But seriously, it’s amazing how many other sites don’t even do the basics. When choosing any service that involves sensitive information, especially sensitive financial information, I’d suggest always looking for the following:

  • Make sure the address starts with https://. (Sometimes this is replaced with an icon of a little padlock.) This means it’s using the “secure” version of HTTP, which is the protocol that powers the web. Make sure it’s there from they very first page you load, and stays there as you browse the site. Sure, it’s a bit more expensive for the company. But it’s the least we can do.**
  • Look for PCI compliance. Or, if not that (because it’s pretty intense), at least *some* indication they’re using a third-party approved security framework.
  • Look for strong partnerships, such as banks and financial institutions. These guys take security really seriously, so if they’re on board, it’s another vote in the site’s favor.

Real security often isn’t easy. But most important things aren’t.

-david

** Note: I should highlight that this blog doesn’t use HTTPS, but it’s also not asking you for anything. When you sign in to Expensify proper — at https://expensify.com — every connection is secure.

What if all candidates for public office used Expensify to track and report both their campaign expenses and their expenses while in office?

Continue Reading...

I’m a big fan of both expense reports and Palm Pre (which means now I’m a big hesitant fan of HP), so when I heard the CEO of HP was fired for submitting a series of fake expense reports I couldn’t help but ask: what was in those reports, and could we have detected it before he got fired?

It says they were submitted to conceal a relationship — but how do you use an expense report for that?  I can think of a couple of ways:

  • Claim to be somewhere you weren’t by submitting a fake expense at some other location.
  • Claim to be somewhere on a date you weren’t by submitting a real expense, but claiming it happened on a different day.
  • Claim to be at work when you’re at play by having a personal meal and claiming it was for work.

I’m sure there are others, but these are all I can think of at this moment.  But the next question is: how could those expenses have been flagged for closer review and hopefully detected before it got out of control?  Taking each in turn:

  1. Require all company purchases to be made by credit card, and require that expense reports be submitted from a service that imports credit cards.  This makes it essentially impossible for an employee to invent expenses out of thin air because only actual, legitimate purchases taken straight from the bank are allowed to be expensed.
  2. Review expenses with modified dates and ask why the date was changed.  If it’s off by a day or so it could be just the natural delays of credit cards, but if it’s off by a large amount — many days or weeks — then it  might be some other expense (personal or otherwise) being “time-shifted” into the report so as to create a false trail.
  3. The third one is really hard: how do differentiate between an actual business dinner with clients versus a personal dinner with a friend.  The credit card record looks essentially the same… I’m not sure how to catch this on an individual basis, but if it happens on a recurring basis (which it sounds like was the case) then some signature might be detected over time.  What can you suggest?

Obviously no company should get paranoid about its employees — the vast, vast majority of expenses are totally legit.  Even the overwhelming majority of policy violations are due to simple error, either when entering the expense or incurring it.  But in this vast sea of proper expenditure are many, many individual instances of fraud.  And the better equipped you are to detect them, the more likely your employees won’t bother trying in the first place.

Anyway, if I have two pieces of advice for the new CEO:

  • File your expense reports accurately and on time,
  • Make a better phone than the Palm Pre!  WebOS is awesome, and I love the Palm’s form factor and keyboard, but dude!  Give this thing more RAM and a better processor, your loyal fans are dying here!

-david

PS: I’d be remiss if I didn’t mention that Expensify’s anti-fraud protections would have automatically prevented the first and highlighted the second.  As for the third… we’re working on that.

How many times have you heard “cloud this” or “cloud that” but were never sure of where your stuff actually was in this “cloud”? Well, at Expensify we got fed up with giving people a roundabout answer about which one was our cloud and where your expense reports are going. This past weekend Zhenya and Witold took some time off from providing phone support and monitoring servers to hand pick and deliver your expense reports in to the cloud.

A cherry picker wasn’t tall enough and the clouds of smoke around San Francisco weren’t the clouds we were looking for. Already, picking a cloud seemed way more difficult than initially thought. Not to be discouraged, we set our sights outside of San Francisco. After several hours of driving, we’d finally found a cloud we liked.

Hovering right above Mt. Shasta, our very own expense cloud looked so soft and pure, yet menacing enough to ward off any potential threats to the security of your expenses. Making haste to get your expense reports moved in to their cloud, we geared up and proceeded on our quest.

 

Having only stopped to put a fresh Clif bar in our stomachs and water to wash away the thirst, we made our way through the tree line and emerged on to the lower part of Avalanche Gulch.

Feeling good from the thinning air, we kept on our way up, winding along the narrowing gully…

…until we reached a plateau: Helen Lake, a place to rest and relax for the night. Tired from the last push, we lounged around where the sun peeked through the cloud (and got quite a tan!) to give our legs a much needed break. A packet of chicken and rice mixed with boiling water did the trick to bring back our strength and regain our confidence in the mission at hand. As we set up our neon yellow home for the night, all we could think about was the next part of the climb, and more hot food.

It’s morning. 5 AM to be precise. It’s also cold, but not nearly as cold as it should be for all of the snow surrounding us. Despite the differences in scenery, the next day of cloud searching began much like any other day: with breakfast. A boiling pot of Gatorade mix and a blueberry crisp Clif bar sets us straight as we begin our move in to the cloud.

 

Just mere meters below the cloud, you can really see the excitement burning Wito’s lungs as he comes ever closer to announcing…

“It’s official! ”

“Your expense reports are in the cloud.”

The glee and glory soon faded as our thoughts turned to the future. What about when we get more people using our apps? What happens when we expand and need a bigger cloud? Well, what a perfect spot for us to be in. It just so happened that the summit was staring down at us, several hundred meters in the distance. Surely up there we would have enough room to host a bigger cloud when the need arose.

Refueling from now frozen chocolate chip Clif bars and icy water, safe and secure in the knowledge that we’d got at least a little cloud space to tide us over, the push to the summit seemed easy. We clambered up the last bit of ice, snaked over a sulfur spring and made the last steps to wind around a cluster of rocks to set foot on the very tip top of Mt. Shasta.

Finally, looking down at our expense cloud below, we knew that our mission was a success. Overcoming hurdles (and a lot of icy rocks), we had come out on top ensuring that we have enough cloud space to handle our growth.

As of this writing, we are the first and only expense reporting solution with tangible proof of being in the cloud. Where else do you get that kind of authenticity and dedication?

When we launched “Expense reports that don’t suck!” in September 2008, the tagline was pretty controversial.  Half the responses cheered us on, and the other half thought we were idiots.  Well nothing calms nerves like good company, one of who is none other than GE (yes, that GE):

When I first saw that I thought, “surely it’s a coincidence, they couldn’t really be copying Expensify… right?”  Then the other day TechCrunch posted a story about “A Bank that Doesn’t Suck”:

Ok, that’s starting to get close, but still.  Probably a coincidence.  And then today:

I think I see a trend.  But you know, it’s a good trend.   It doesn’t matter if they’re copying us.  What matters is we’re brothers in arms, waging a global, multi-industry battle against Suck.  Welcome to the fight.

Add custom fields to your expense reports

 —  February 22, 2010 — 2 Comments

We’ve just released a relatively small but significant change: now you can add custom fields to your Expensify expense reports, thereby asking your employees to provide any extra information you require — right on the report itself. It’s our way of allowing you to make the transition from your current expense reporting process to Expensify as seamless and linear as possible.

Customer ID# custom field in an expense report

The text boxes to populate the newly created custom fields will appear below the text box for the report title. Once text is entered, the entry will show up on the top right of the expense report.

Multiple custom fields added to an expense report

There is no limit to the amount of custom fields you may add to an expense policy. Use them to provide more details, contact names and numbers, project names and identification numbers or anything else you may need to indicate on your expense report. For more information on how to add custom fields to an expense policy you created, or to create a new expense policy with custom fields, visit our expense policy help page.

We’ve had a lot of requests for exporting Expensify reports into FreshBooks invoices, so last night Witold and I decided to take on a late night project to whip it up. We were really impressed with the simplicity of the FreshBooks API, so the whole thing went in smoothly in just a couple hours. Accordingly, behold! FreshBooks expense reports exported straight from Expensify!

If you know that that means, take a look at drop me a line to let me know what you think. There’s a couple ways to do it and we’ve opted with the simplest for now; let me know if you’d like the data exported in a different way.

On the other hand, if you don’t know what I’m talking about, it basically means this:

  1. Import your credit card into Expensify, as normal.
  2. Create, submit, and process an Expensify expense report, as normal.
  3. But when done, check out the flashy new Export to FreshBooks button.
  4. Click it and we’ll connect straight to your FreshBooks account, create a new invoice, and attach each of the itemized expenses.

The upshot is it lets you harness the power of Expensify for expense reporting, but combine it with the power of FreshBooks for invoicing. This is particularly handy for contractors with lots of “rebillable” expenses, as you can use Expensify to record those on the road using our suite of mobile apps, manage all the receipts online, export into QuickBooks for tracking, and then export to FreshBooks for invoicing. Pretty slick, eh?

Oh, and how much does it cost? It’s included for free in a standard Expensify account (which is free for individuals and very-small businesses).

And perhaps it’s not worth mentioning but I will, this works with all the standard Expensify features including support for 58 international currencies (with conversion on the day the expense was incurred), hour and mileage tracking, mobile expense logging and receipt scanning, direct import for most debit cards and 94% of US credit cards (and OFX upload for the rest), etc. By itself it’s a pretty small feature, but in conjunction with everything else, I’m hoping it’ll be a huge help for all the contractors who have requested this. Enjoy!

-david
Follow us on Twitter at @expensify

Update: This post has been superseded by a newer, better job post here.  Basically, we realized this post was way too general and brand oriented — we’re numbers people and we want to quantify the ROI on everything, marketing included.

A bit about us:
We’re a 4-person startup working like mad to disrupt a multi-billion dollar financial industry from the bottom up. The company is named Expensify, and we do “expense reports that don’t suck.” We do that by importing your expenses *and your receipts* straight from your credit card, submitting PDF expense reports by email, and by reimbursing entirely online — now with QuickBooks support. Basically, we’re the expense report system you always wish existed.

That might or might not sound exciting to you, and that’s okay. Most of the *really* exciting things can’t be shared openly. But needless to say, it’s a real problem that affects millions of people — people who spend a lot of money — and there are already billion dollar companies who focus on this problem alone.

We have users, investors, partners, awards, and a crapload of good technology (not the least of which is an iPhone application, with BlackBerry, Palm, and Android on the way). We pay pretty decent salaries, are very generous with equity, and provide solid benefits.

We’re really happy where the product is at overall, but we also realize our limits: we don’t have the DNA to make the product really “pop” in that super-polished way. So we need more new DNA in the team. Which is why we’re talking to you.

A bit about you:
The most important thing is that you are awesome. You work incredibly hard on a huge diversity of tasks. You can do pretty much anything you set your mind to, often better than people who have spent their whole lives doing it. You have more ideas than you’ll be able to accomplish in a lifetime. Does this sound familiar? If it doesn’t that’s fine. But it means I’m probably not talking to you.

Next, you’re cool to be with. We work really hard, sometimes from really distant locations. (Every year we go overseas to work from a remote beach: we just got back from Istanbul, but previous years — in a previous startup — we’ve gone to Thailand, Mexico, and India.) You’ve got to be extremely passionate about your work, but also respectful that sometimes things don’t go your way, and that that’s okay: everyone will return the favor, so in the long run, if you’re right more than you’re wrong, you’ll end up getting your way regardless.

(Incidentally, we work 3 days a week together — M/W/F; the rest your on your own. We don’t currently have an office, we’ve been doing the coffeeshop thing for the past year, but we’re considering getting a space downtown SF now that the team is growing)

If all those are taken care of, then ideally you would also be a whiz at product marketing. You’ll never, ever be pigeonholed, and you’ll be involved across the board in decisions big and small. But we are specifically looking for someone to pick up and run with the following responsibilities:

– Engage with a professional designer to create the “Expensify Look”
– Refine our tone and messaging to create the “Voice of Expensify”
– Rewrite every frickin’ word on the entire site to be awesome
– Gather conversion data and iterate upon the data to find what works
– Spend a bunch of money on a marketing campaign, in a cost-effective manner
– Manage blog outreach and PR
– Keep abreast of the competition’s features and messaging
– Propose and execute an unending series of ridiculously crazy promotion ideas

Basically, your job is to sign up users in every way possible, and then keep them coming back for more. Every tool will be at your disposal. Is this interesting to you?

Next steps:
We’ve got a process worked out. It involves you answering a bunch of the standard interview questions up front, in your first email to us. This saves everyone time (if you’re willing to spend hours with us interviewing on the phone or in person, why not spend half that time in email?), lets us talk with more candidates than we could feasibly do otherwise, and we find the best candidates actually enjoy the process. If you don’t enjoy it or don’t have time for it, it’s probably a sign that this job isn’t right for you and that’s great! We’ve saved you the time applying, and us the time turning you down! For everyone else, here are the questions without further ado:

1) What’s your story, in a nutshell? What have you been up to with your life, and ultimately, what do you want to do?

2) What about the above job post most appealed to you? Why do you want to work with Expensify?

3) What about the above job post causes you concern? There’s got to be at least one thing about it that rubbed you wrong. What was is it?

4) Take a look at http://expensify.com — create yourself an account (it’s free) and play around. You can import a test “citibank” card with username “expensifydemo” and password “demo”. Tell me honestly: what do you think? If you were hired with the general mandate to “make this website kick ass”, what would you do?

5) Off the top of your head, without doing a lot of research or anything, who do you feel are our competitors and how do you think we are differentiated from them? It’s cool if you don’t know them, don’t worry. They all suck anyway. (Just kidding. Sorta…)

6) We’ve heard “Expense reports that don’t suck!” is a problematic slogan because it’s somewhat negative. What would you suggest as a better slogan? Or would you suggest we keep the current one?

7) Please answer as many of these as you can, without doing any research: (Incidentally, it’s *totally ok* to not know an answer. Don’t cheat; it just wastes everyone’s time.)

7.1) Do you know SQL? If so, imagine there are two tables, defined as:

CREATE TABLE accounts ( accountID INTEGER, email TEXT );
CREATE TABLE reports ( reportID INTEGER, accountID INTEGER, amount INTEGER );

The former is a series of accounts, the latter is a series of reports — each of which is owned by a given account. Can you write a query to select a list of distinct email addresses that own reports for over $100?

7.2) Do you know PHP? If so, what’s wrong with the following code?

The square root of 2 is <? sqrt(2) >

7.3) Do you know JavaScript? If so, what’s the difference between encodeURI() and encodeURIComponent()?

7.4) Do you have a preference between lighttpd and Apache? What is it?

7.5) Do you have a preference between Ubuntu and Red Hat? What is it?

7.6) What is the difference between colocation and dedicated servers?

7.7) Do you know how to use Photoshop? If so, describe in words how you would create from scratch a transparent PNG containing an orange outline of the words “Hello world!”, in Arial font.

7.8) Are you skilled in SEO? If so, what’s the #1 recommendation you’d make for how to change our homepage to improve our Google rank for the term “expense report”?

7.9) Have you ever used Subversion?

7.10) What are the kinds of tasks that you would directly implement yourself, versus handing off to other contractors and subordinates?

8) Please illustrate an example of when you were torn between the following, which ultimately won out, and why:

8.1) Going with what felt right, versus going with what the data said?

8.2) Going with what the data said, versus going with what the user said they wanted?

8.3) Going with what the user said they wanted, versus going with what felt right?

8.4) Adding new users, versus increasing engagement with existing users?

8.5) Improving the product for customers, versus making money for the company?

9) Please give a bit more detail about your background and methodology, including:

9.1) Have you done marketing for a consumer or small-business website before? How does it differ from other types of marketing?

9.2) How have you measured the success of your marketing efforts in the past, and based on that measurement, how did you do?

9.3) What’s the difference (if any) between you and a salesperson?

9.4) What’s the difference (if any) between you and a designer?

9.5) What’s the difference (if any) between you and a community evangelist?

9.6) What’s the difference (if any) between you and “the typical marketing person”?

9.7) Do you have any experience working with affiliate and lead-generation programs?

9.8) What else should we know about you that hasn’t been covered here?

10) What do you think of these questions? How can we improve them?

11) And most importantly: how did you file your last expense report, and did it suck?

Please send your answers to dbarrett@expensify.com whenever convenient, along with a resume (if you have it, but don’t fret if you don’t). I guarantee I’ll reply to you if you actually fill out the questions. Thanks, I look forward to hearing from you soon!

-david
Founder, CEO of Expensify
You should follow us at http://twitter.com/expensify

Lions with Lightsabers

 —  August 19, 2009 — 6 Comments

At Expensify, we know security.

ninja