Blackline Accreditation Questionnaire Final - 151218 PDF

ICAEW Accreditation Scheme
Online Financial Controls and Automation Software
BlackLine
Enhanced Financial Controls and Automation Platform
Evaluation carried out by John Oates
Date completed: 18 December 2015
Signed: John Oates

Table of Contents
1 Summary ……………………………………………………………………… 3
2 Approach to evaluation ……………………………………………………… 3
3 Matters to consider before purchase ……………………………………….. 4
4 Evaluation conclusion ……………………………………………………….. 8
Disclaimer …………………………………………………………………………............ 9
5 System Security and Access Controls ……………………………………… 10
6 Implementation ……………………………………………………………… 18
7 Data Import Process .………………………………………………………... 21
8 Services & Support …..……………………………………………………… 24
9 Enhanced Financial Controls and Automation Platform …………...……. 28
10 Software Functionality ………………………………………………...……. 29
11 Account Reconciliations …………………………………………………….. 33
12 Transaction Matching ………………………….…………………………… 37
13 Task Management ……………………………….………………………….. 39
14 Journal Entries ……………………………………………………………… 44
15 Variance Analysis ………….………………………………………………... 49
16 Consolidation ………………………………………………………………… 52
17 Intercompany ………………………………………………………………... 55
18 User Documentation ………………………………………………………… 57
2
1 Summary
1.1 Introduction
Financial controls and automation software requirements vary dependent upon the
businesses requirements at the time of purchase. Both business and user requirements
should be fully considered before entering into any software purchase.
Software as a Service (SaaS) allows users to access software from any location where they
have internet access. Users benefit from the collective community as enhancements and new
versions are uploaded seamlessly without any IT requirement.
The quality of the software developer should also be considered at the onset.
1.2 Fundamentally, SaaS accounting platform should:
 Be capable of supporting the accounting functions for which it was designed

 Provide facilities to ensure the completeness, accuracy, confidentiality and continued
integrity of these accounting functions
 Be effectively supported and maintained
It is also desirable that good accounting software should:
 Be easy to learn, understand and operate

 Be administered by Finance teams
 Adhere to all current data security regulations
 Have a good audit trail
 Provide dashboard visibility across all processes
 Provide online training certification for users
It is essential, when SaaS software is implemented, for appropriate support to be available 24

hours a day, 7 days a week.
2 Approach to evaluation
2.1 Objective
To evaluate BlackLine against a set of criteria developed by the ICAEW to ensure that the
software meets the requirements of a SaaS Accounting Platform, as laid down in the
summary above.
2.2 Approach and Work performed

In order to effectively evaluate BlackLine, a product specialist from BlackLine completed
the detailed questionnaire and provided it to the evaluator to examine. The evaluator then
visited the BlackLine office in London and in conjunction with the operation of the various
aspects of the software assisted by a member of BlackLine technical staff checked the
answers to confirm their validity. The questions were individually reviewed and commented
on and the majority of assessments were confirmed.
3
The evaluator discussed the assessments with a member of BlackLine staff in order to
clarify certain points. In the event of disagreement between BlackLine and the evaluator,
the evaluator's decision was taken as final and the response changed accordingly.
BlackLine Version 7.3.6.351 was used throughout the evaluation. The evaluation covered
the fully integrated SaaS platform for enhanced controls and automation of financial close
processes covering Account Reconciliations; Transaction Matching; Variance Analysis;
Task Management; Journal Entry; Consolidation Integrity Manager and Intercompany hub.
When the evaluation had been completed, the responses were completed by the evaluator
and a draft copy sent to the ICAEW for review before completion of the final report.
2.3 Software/hardware utilised

The accreditation evaluation was performed using version 7.3.6.351 on a standard wifi
connection. A Dell Latitude laptop with Chrome Browser was used to demonstrate the
platform, though this cloud-based software can be used on anything including a tablet.
There is no restriction on what is seen, except for the mobile version. The dataset for the
evaluation demonstration is taken from demonstration data located in the US. However,
an instance also exists with the data retained within the EU.
2.4 Report structure

The report has been broken down into its main constituents in the contents page. The
evaluation questionnaire was provided by the ICAEW and has been used without alteration
or amendment.
3 Matters to consider before purchase
3.1 General overview

BlackLine Finance Controls and Automation Platform consists of 7 modules spanning
finance and accounting processes that are typically performed during the financial ‘close’.
(‘Close’ is the portion of the accounting cycle when figures are substantiated and analysed,
so that financial reporting can be prepared). The platform also extends to purpose-built
solutions for business process including intercompany, financial transformation, controls
assurance, and a comprehensive reconciliation solution.
3.2 Supplier background

BlackLine’s platform and modular range of solutions was originally developed in 2001.
The software was introduced to meet the demands of Sarbanes-Oxley (SOX) compliance
regulation. Finance professionals worked directly with product development to provide
additional functionality as requested by the user community as the company clients grew
in number.
BlackLine has headquarters in Woodland Hills, California, USA and operates additional
offices in the US (Atlanta, Chicago, New York City), Canada (Vancouver), France (Paris),
Australia (Sydney, Melbourne) and the UK (London). For more information on BlackLine
and its products and services please refer to www.blackline.com
3.3 Product background and Suitability for user

The first implementation of the software was in 2005.
4
BlackLine provides enhanced financial control and automation for close processes. There
is strong integration between the seven modules in the platform that enables the
introduction of workflow across the close processes.
The BlackLine solution is highly configurable to address the specific needs of individual
customers, as well as the needs of end users. As a web-based SaaS application, BlackLine
is globally accessible, 24/7/365.
With BlackLine, the client is not required to purchase, install or maintain any
software/hardware. It is designed for clients to receive rapid deployment, and obtain 24/7
instant access to their instance from any location.
3.4 Typical implementations

BlackLine software is implemented across all industries in mid- to large enterprise clients.
Number of users range from 10 to thousands globally depending upon the client’s business
requirement.
The software can be implemented by the client themselves with BlackLine Implementation
Consultants and/or clients can choose to work with any of the fully certified third-party
implementation partners.
3.5 Vertical applications

BlackLine clients often run shared service operating models for finance and accounting
processes. In some instances they operate a hybrid model using the services of a third party
Business Process Outsourcer (BPO) to deliver certain Finance and Accounting Processes
that are required for the close.
3.6 Software specifications
3.6.1 Development environment
Format
Process Agile development process
Development Microsoft Visual Studio
Environment
Version control Git
Planning and work Atlassian Jira
tracking
Issue / Bug tracking Atlassian Jira
Documentation Atlassian Confluence
Test / Quality Atlassian Jira, code scans, and various QA tools. BlackLine utilises
Assurance both automated and manual QA testing for all releases
3.6.2 Server platforms
BlackLine clients can choose whether to store their data in EU or U.S. data centres. The EU
primary data centre is in Amsterdam; the secondary is in the Greater London area. The U.S.
primary data centre is in Virginia; the secondary is in Florida.
5
BlackLine Systems has complied with the U.S. –EU Safe Harbor Framework and the U.S.-
Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding
the collection, use and retention of personal information from European Union member
countries and Switzerland.
BlackLine Systems has certified that it adheres to the Safe Harbor Privacy Principles of
notice, choice, onward transfer, security, data integrity, access and enforcement.
In light of recent EU legal decisions, as an alternative to Safe Harbor, BlackLine now

offers customers a data processing addendum to their agreements that incorporates the
European Commission’s standard contractual clauses, commonly referred to as “model
clauses”. Use of these model clauses will allow for the continued transfer of personal data
under EU data protection laws.
3.6.3 Databases
Microsoft SQL Server Database
3.6.4 Operating software
ASP.NET 3.5; SQL Server 2014

Microsoft Windows Server 2012 R2
3.6.5 Minimum client PC specification
Any machine capable of running a modern ‘Web Browser’
3.6.6 Support and maintenance
BlackLine is a SaaS offering. All maintenance is provided in-house by BlackLine personnel.

Support is available to clients on a 24 hour, 7 days a week basis.
3.7 Software installation and support
BlackLine is a SaaS offering and does not require client installation. Support is provided to
clients free of charge on a 24 hour, 7 days a week basis.
User licence fees are based on a number of factors including desired functionality and
number of users; BlackLine should be contacted for a cost quotation. The standard
BlackLine service level agreement (SLA) allows for credits for any downtime under the
100% uptime service level.
3.8 Partner network and related accreditation process
BlackLine states,
“Working together with our global network of Partners to deliver world-class cloud business
software and outstanding service for more customers in more places means added strength.
As an organisation, we understand that there is a necessity to meet local needs while also
6
addressing the global requirements of many of our customers. To complement our direct
sales teams, our partners offer local sales, marketing, services and support, delivering top-
class localized services.
“Fundamental to our partner strategy is bringing excellence and added value to every phase
of the product lifecycle - from partners at the strategic level through to channel partners,
outsourcing partners and implementation partners at the delivery level. These relationships
increase the value of our solutions and BlackLine to our customers —value that comes from
leveraging domain expertise, long-term partnership and investments, and qualified and
efficient delivery that reaches every corner of the globe, and support to help BlackLine
customers meet their unique regional and local requirements.
Channel Partners
“Channel Partners play an integral role in supporting BlackLine's overall product strategy.
Our Channel Network is a key part of our success, and our goal is to provide our partners
with best-in-class financial solutions to help them build a sustainable and profitable business.
BlackLine recognizes local relationships with customers and offers a partner program
designed to preserve those relationships on an ongoing basis while expanding the reach of
BlackLine.
Business Process Outsourcing Partners
“BlackLine has formed partnerships with leading providers of finance and accounting
outsourcing and transformation services to automate and control the financial close process.
These outsourcing partnerships allow companies to leverage providers’ expertise, best
practices and efficiencies, so management can focus on core business activities.
“BlackLine's Business Process Outsourcing (BPO) Partners provide BPO services and
Business Process as a Service (BPaaS) solutions for BlackLine's SaaS Financial offering.
Similar to our BlackLine end-customers, our BPO partners can reduce costs, improve
efficiency and visibility, and speed time to value with a single platform that scales from
small clients to global enterprises.
BlackLine Technology and Implementation Partners
“BlackLine technology partners help us deliver the best possible services to our clients. An
extension of our team, they demand the same high standards and quality of service we do—
and we wouldn’t accept any less.
“BlackLine has built a global community of highly qualified technology and implementation
partners who provide expert quality implementation and related services. Our partners work
closely with BlackLine to provide our customers with deep industry vertical experience and
best business practices.
“BlackLine technology and implementation partners are all certified by BlackLine and on an
ongoing basis. BlackLine ensures our partners maintain the highest functional and technical
qualifications and expertise to support the full BlackLine product portfolio in the global
geographies and target markets we serve.
7
Alliances and System Integrators
“BlackLine has formed strategic alliance partnerships with a number of expert consultants
and service providers to help our clients meet broader needs, such as finance transformation,
change management and advanced implementation services.
“Our strategic alliance partners are unique and diverse, ranging from the Big Four public
accounting firms to small consulting practices. From North America and EMEA to APAC
and South America, they have a global reach to match BlackLine’s and bring their own
expertise and impeccable service to every client.
“BlackLine shares tactical and strategic plans with our Alliance network, working together at
the planning, design, and operational levels to ensure our products and services leverage
each other, delivering the greatest value to our BlackLine customers.
BlackLine Affiliate and Referral Partners
“BlackLine Affiliate and Referral Partners introduce BlackLine to prospective customers

and in return receive a referral fee. Many Affiliate and Referral Partners also come to be
recognized as BlackLine experts and respected advisors. Our referral programme is
complementary to our BlackLine sales organisation, with BlackLine absorbing the cost of
selling, closing, implementing and servicing companies referred.”
3.9 Limitations
There are limitations in the product which while not adversely impacting upon this
evaluation may be of importance to certain organisations. It is important that any
organisation contemplating the purchase of software reviews the functionality described
and limitations therein against its detailed requirements.
Attention is drawn in particular to the following areas where the product, on its own may
not be suitable for organisations with certain specific requirements:
 The system does not create Gantt Charts in the reporting; this is scheduled to be in
the product in 2015
 Language and localisation such as date format is set up by users via their Browser
settings
 Older insecure browsers are not supported. This includes Internet Explorer version
7 and earlier
 Image based files such as jpeg, tiff, pdf files cannot be read by system for
transaction matching. However, these image files can be attached within the
system as supporting documents
 Workflow approvals are limited to five levels of certification.
4 Evaluation conclusion
There were no areas in the evaluation that gave concern. BlackLine is a well-designed
SaaS financial controls and automation platform that will be supported directly by
BlackLine or certified partners.
8
In terms of the functionality that is present in the current version and the target market for
this product, the product has been adequately specified. It is easy to use, administered
within the finance team, and provides real time finance data in an online dashboard format.
Disclaimer
Any organisation considering the purchase of BlackLine should consider their requirements in the
light of proposals from BlackLine and potential suppliers of other similarly specified products.
Whilst the contents of this document are presented in good faith, neither ICAEW nor John Oates
can accept liability for actions taken as a result of comments made herein.
9
Functional requirements questionnaire
BlackLine Enhanced Financial Controls and Automation Platform
Question Supplier Response Evaluator’s Comment

5. System Security & Access Controls
5.1 Is data stored within this Yes. BlackLine encrypts all client Noted
application encrypted? data both in transit and at rest.
5.2 How is a client’s data kept Each client has their own unique Noted
segregated from that of URL and a dedicated database and
other clients on the document repository.
platform?
5.3 Has the vendor achieved BlackLine is annually audited to Noted

any type of certification in ISAE 3402, SSAE 16, AT Section
respect of the internal IT 101 standards, and Systrust/
controls that it operates, Webtrust principles. BlackLine is the
e.g. ISA3402/SSAE16? first provider in its space to receive
the highly regarded ISO/IEC 27001
certification, confirming that the
company meets or exceeds the latest
information security industry
standards.
5.4 Has the vendor achieved Yes. BlackLine is ISO Noted

any specific security 27001certified.
certifications, e.g.
ISO/IEC 27001?
5.5 Describe the tools, BlackLine uses firewalls, Intrusion Noted

infrastructure, and Detection System (IDS) and log
processes that are in place management tools to monitor and
to ensure enterprise-grade maintain a secure environment.
reliability, security, and System monitoring tools are used to
performance. assess performance and early
identification of problems and errors.
All client data is encrypted at all
times. Hot disaster recovery (see
below) and full nightly backups
ensure business continuity. Actual
up-time over the past 2 years is
99.99%.
5.6 Are information security Yes. All information security Noted

policies reviewed and policies are reviewed annually
updated periodically? If (typically in June/July) or as
yes, how often? warranted based upon emerging
threats and changes to information
10

security best practices.
5.7 Is there a documented Yes. Noted

disaster recovery and
business continuity BlackLine will provide the client
programme that is with a Hot Disaster Recovery (HDR)
sponsored and approved service. The HDR service includes a
by senior management? If fully mirrored disaster recovery data
so, has the DR plan been centre which contains a mirror image
formally tested and any of the customer’s production.
issues identified been BlackLine performs a nightly backup
actioned and how often are as an added layer of data protection
DR tests undertaken?” in addition to BlackLine's continuous
server backup.
BlackLine conducts annual DR tests.

The last test was performed in late
2014 and was 100% successful.
5.8 What is the Recovery BlackLine has a defined a one-hour Noted

Point Objective (RPO) and Recovery Point Objective (RPO) and
Recovery Time Objective two-hour Recovery Time Objective
(RTO)? (RTO).
5.9 Is antivirus software and Yes. Antivirus and antimalware Noted

spyware detection and tools are maintained internally by
protection included? Blackline to secure the environment.
5.10 Is client access to the Yes. BlackLine uses TLS/SSL and Noted
service via a secure HTTPS technologies.
connection (e.g. SSL)?
5.11 Is an Intrusion Detection Yes. BlackLine uses IDS tools to Noted

System (IDS) used? monitor and maintain a secure
environment. System monitoring
tools are used to assess performance
and early identification of problems
and errors. IDS configuration
settings are monitored and reviewed
on a periodic basis. IDS rules are
updated automatically as soon as
updates are available. Alerts are
responded to 24x7.
5.12 Is there a formal process Yes. BlackLine uses a battery of Noted
for identifying threats tools for real-time health,
11

and vulnerabilities performance, and security
(through early detection monitoring for hardware, servers,
alerts, vulnerability and applications. The tools are
scans, etc.) and tracking managed by production operations,
remediation? Network Operations Centre (NOC),
and InfoSec teams, who respond to
alerts 24x7.
5.13 Are periodic penetration Yes. Tests are performed annually Noted
tests performed against or as needed.
your Internet-facing
network and systems by
a specialist third-party
provider?
5.14 How regularly are Yes. BlackLine follows vendor Noted

critical patches applied to patch cycles. Through our Premier
systems and/or Support Services Agreement with
infrastructure? Microsoft, we receive most system
patches early with Microsoft's full
support in order to deploy them as
quickly as possible to our customers’
environment.
5.15 Is there a formal and Yes. Our systems and policies are Noted
documented process for designed to enforce principles of
employee and customer least-privilege and "need to know";
account management that BlackLine staff access privileges are
includes provisioning, reviewed and promptly removed if
password requirements, no longer appropriate.
and access controls?
On the client side, the customer’s
designated system administrator
manages all user provisioning,
password requirements, and access
controls, in accordance with
customer’s policies.
5.16 What form of user The BlackLine solution offers both Noted
authentication are web-forms authentication and Single
supported, e.g. user Sign-on (SSO) capabilities (via
name/password, Active Directory Federation Service
certificates, tokens, etc? 2.1 [ADFS] and SAML 2.0).
BlackLine supports multifactor
authentication through integration
12

with clients’ identity providers
(SAML2.0.).
5.17 Does the application Yes. The client's system Noted. Set up screens reviewed
implement password administrator can configure the
enforcement policies, password requirements including the
such as minimum length, password length, upper-case
complexity, not allowing characters, lower-case characters,
the use of generic numbers, special characters required,
usernames/passwords, the unsuccessful number of attempts
expiration and re-use before lockout, forcing a history of
restrictions? previous passwords, and more.
5.18 Does the system enforce Yes. The password change interval Noted
a maximum password is a configurable setting within
age? BlackLine.
5.19 Does the application Yes. This is a configurable setting Noted

have a password history within BlackLine. The client’s
functionality enabled system administrator can set the
such that passwords number of previous passwords to
cannot be reused within a prevent users from using those prior
predefined period of passwords.
time?
5.20 Does the application Yes. Active Directory Federation Noted

have the ability to Service 2.1 (ADFS) and SAML 2.0
integrate with federated provide a Single Sign-On Solution
single sign-on (SSO) to the BlackLine application
solutions/protocols (e.g.
using SAML)?
5.21 Describe the options BlackLine's Team functionality Noted. The set up was reviewed
available to allow (role- allows multiple users to have access and discussed, including setting
based) user security to a given account. This could be up of users, their responsibilities
groups. required when people "share" and access permission processes
responsibility for getting a for all in their teams
reconciliation done or when people
work together to accomplish the
completion of the reconciliations
process. Anyone on the Team can
access the reconciliations with any
role they are authorized for in the
BlackLine application.
13

5.22 Does the system enforce Yes. The account lock-out is Noted
account lock-out after a configurable. The client’s system
specified number of administrator can define the
incorrect authentication maximum failed login attempts, as
attempts? Please well as a failed-attempt expiration
describe. period.
5.23 Does the system enforce Yes. Users are logged out after 60 Noted
a session time-out after a minutes of inactivity or the allotted
pre-defined amount of time desired by the client, as the
user activity? Please timeframe is configurable.
describe.
5.24 Does the application Yes. Passwords are stored using Noted
provide protection irreversible salted hashes (SHA-
(encryption/hashing) for 512).
stored passwords and
other sensitive data?
5.25 What processes are in Yes. Client’s designated system Noted

place to revoke access administrator can disable the account
rights of users who have of a terminated user (i.e., mark the
left an organisation? account as “inactive”).
5.26 Are system log files Yes. BlackLine’s tool offers Noted. Set up and example log
retained for a specified administrators an audit trail files reviewed, together with
period of time to assist in indicating workflow processes individual transactions, user ID,
access control including action taken, user who date, etc
monitoring and security completed, data imported, login/out,
investigations? password reset, user modification,
time/date stamp, and any attempts to
modify or delete data. Audit logs
within the application can be
retained indefinitely by the client.
5.27 Does the application Yes. In order to prevent code Noted

perform data validation injection, XSS (Cross-Site
for inbound data to Scripting), and similar issues,
identify common attacks BlackLine performs weekly
(e.g. SQL Injection, application security scans and
XSS)? conducts developer training.
BlackLine's policies and procedures
comply with Open Web Application
Security Project (OWASP)
recommendations. In addition,
14

BlackLine operates a number of
security and health monitoring tools,
including IDS, security logging and
event management. Our operations
team receives alerts from the tools
and responds to them 24x7. All
vulnerabilities, critical incidents, and
security breaches are remediated
immediately.
5.28 Does the product/service No. BlackLine only uses cookies for Noted
require the use of any session management. There is no
technologies that may be personally identifiable information in
considered as a security BlackLine session cookies, and they
risk? e.g. ActiveX, expire at the end of the session.
JavaScript, Cookies. If
so, describe how the user
can mitigate this risk.
5.29 Does the application Yes. All data in transit is encrypted Noted
employ encryption using TLS (Transport Layer Security
technologies to protect Protocol) certificates and HTTPS
customer data during protocols.
transit?
5.30 Does the application Yes. BlackLine provides multiple Noted and reviewed
provide an audit trail for audit trails. Administrators can
administrators? If so, access an audit trail indicating
describe the detail workflow processes including action
available within the trail. taken, user who completed, data
imported, login/out, password reset,
user modification, time/date stamp,
and any attempts to modify or delete
data. Audit trails also track changes
to critical settings, and saved items
within the application track the user
along with the date and timestamps.
For the reconciliations audit trail, the

application tracks the user who
completed, the associated level
(prepared, approved, reviewed), the
reason, and the time/date stamp.
5.31 Is a system log Yes. Noted
15

maintained by the service
provider that details BlackLine logs access and activity
• User access by our staff, as well as error
• User activity messages and security violations.
• Error messages BlackLine InfoSec incident response
• Security violations? procedures require immediate client
notifications in case of security
If so, is this log available incidents that involve clients’ data;
to the customer? logs can be requested as needed
through support.
5.32 Are there processes Yes. Customers’ administrative Reviewed – example set up and
available to the customer users can export data from the worked through
to carry out backups? If application in CSV format.
so, please describe BlackLine itself provides both a hot
together with the process disaster recovery service (continuous
available to the customer mirroring) and nightly backups.
to test restore the data.
BlackLine itself provides both a hot
disaster recovery service (continuous
mirroring) and nightly backups.
Customers may also request

restoration of their data by opening a
support ticket.
5.33 Are there policies and Yes. All data will be deleted in a Noted
procedures in place for secure, DoD (US Department of
the disposal of customer Defense) compliant manner.
information? Please
describe.
5.34 What are the BlackLine Systems complies with Noted

implications of the Data the US–EU Safe Harbor Framework
Protection Act over and the US-Swiss Safe Harbor
information held and Framework as set forth by the U.S.
processed by the service Department of Commerce regarding
provider? the collection, use and retention of
personal information from European
Union member countries and
Switzerland. BlackLine Systems has
certified that it adheres to the Safe
Harbor Privacy Principles of notice,
choice, onward transfer, security,
data integrity, access, and
enforcement.
16

(https://safeharbor.export.gov/compa
nyinfo.aspx?id=26978)
Our registration is current, thus
providing appropriate protection for
the information of all European
subjects.
In light of recent EU legal decisions,

as an alternative to Safe Harbor,
BlackLine now offers customers a
data processing addendum to their
agreements that incorporates the
European Commission’s standard
contractual clauses, commonly
referred to as “model clauses”. Use
of these model clauses will allow for
the continued transfer of personal
data under EU data protection laws.
17

6. Implementation
6.1 Please describe in no more Upon initiation, BlackLine’s Noted

than 500 words a typical implementation team will schedule a
implementation process. project initiation call to discuss the
If so, is there a “standard” specific details regarding the project
implementation process? plan and its corresponding
In which case, please timeframes. Our process includes
describe each stage. project planning, data collection /
extraction, system testing, data
validation, user training and go-live
phases. BlackLine standardizes their
implementation strategy and uses a
“train-the-trainer” approach to ensure
the client team is capable of
maintaining and accessing the
application even after completion.
To get users trained and ready for
their new system, BlackLine offers
access to a free e-learning portal
filled with dozens of online classes.
If the client ever needs additional
assistance, BlackLine offers 24/7 live
support at no additional cost.
6.2 How long does a typical BlackLine’s implementation Noted

implementation take? typically takes between 4-12 weeks
Please give an indicative elapsed time. The fastest BlackLine
range. implementation of a major client was
accomplished in 7 days. As we only
offer a hosted solution, there is no
lengthy installation process. The
implementation timeframe is
primarily dependent on the
availability of client data and
resources.
6.3 What variables can extend The implementation process varies Noted
or accelerate an depending on the data and types of
implementation? resources provided by the client.
Other pertinent factors include the
size of the company, number of
users, locations, interfaces, and the
client's response time. BlackLine can
work closely with the client to
accelerate the implementation
18

process, provided we have all
necessary resources and contacts.
BlackLine can definitely
accommodate more aggressive
implementation schedules should the
client request a faster process.
6.4 What resources are BlackLine assigns clients an Noted

committed to the project implementation consultant to guide
by the vendor? them through the implementation
process. In many cases, our
implementation consultants are
former BlackLine users who
implemented the tool at their last
company. The client’s dedicated
implementation expert will have the
ability to draw on a wide variety of
internal BlackLine resources as
needed.
6.5 What resources (technical In most cases, the client will need to Noted
or otherwise) are required have an IT resource or business user
by the client/customer for to build and deliver the data files to
implementation? BlackLine. A project owner will be
needed to guide the project on the
client side which will include
identifying and gathering data
elements for populating into
BlackLine as well as making key
decisions on settings and
configuration.
6.6 Do a majority of No, a majority of our clients self- Third party assistance is often
implementations require implement. Guidance and provided when the client has
third-party assistance (i.e., supporting documentation is
insufficient resources, or where
consulting, professional provided to the client. Configurationthe resource available are
services)? is accomplished through client- already fully committed to the
controlled settings within the “day job”. It is not unusual for
application. clients to treat this as an
opportunity to transform their
processes, so they may use an
external consultant
6.7 What is the average This can vary greatly depending Noted
amount of professional upon the size of the client and the
services required to scope of the implementation, but the
19

implement the solution? average direct professional services
Please provide indicative time will average between 25 and 40
time-ranges for specific hours. Professional services are
integration types, e.g. an priced based on customer needs.
integration with SAP B1
may take between X and
Y?
6.8 Does the implementation No, configuration is done within There is no custom coding. This
require custom coding? BlackLine via client-controlled has the advantage of allowing all
settings. updates to be applied
immediately
6.9 Are custom reports BlackLine provides over 90 standard Users can amend standard
usually written or is the reports; custom reports can be reports, and can also create their
default set are normally created by the client, through our own using standard reports as a
taken and amended by the Enhanced Reporting option. base. The system appears
customer? Enhanced Reporting can be used to intuitive with editing through
make modified versions of the drag and drop of fields, grouping
standard reports, or reports can be and the use of filters and similar
created completely from scratch.
6.10 How is implementation Implementation time can be Noted

billed, e.g. a flat fee or purchased in a package of hours or
hourly? hourly. The initial purchase will
typically include a package of
implementation hours and will be
billed upfront with the initial
purchase. If additional hours are
required, they are billed as they are
incurred.
20

7. Data Import Process
7.1 Describe how the data is The ERP system will interface with Noted
received from an ERP BlackLine's application via secure
system? Is it batch FTP site. Interfaces are scheduled
(schedule/triggered), what to run per the client's needs and can
has to be done to initiate an be modified by the business or
import and how the import system administrators.
is validated.
Data validation is inherent to the
BlackLine application. If data is
imported, the fields are validated to
ensure that the expected value
types are received. Validations also
include prevention of duplicate
accounting strings in the same
account balance load and ensure
that the provided entities have been
set-up within the application.
Errors are also displayed within the
administrator's import screen.
Appropriate corrections will need
to be made and amended records
would then be re-imported.
7.2 How are new accounts When new balances or details are Any items coming in not
created/uploaded/added? imported, the application recognised are placed in an
automatically recognises the new “unassigned” area. The
data and creates a new account. If administrator knows these need
the client has set up Rules-Based to be assigned and will be
Administration, which prompted to assign them
automatically configures accounts through the Home Admin
according to user-defined logic, the screen
account will be automatically
configured and assigned. If not, the
new account will appear on the
system administrator’s dashboard
in order to be properly assigned.
7.3 What happens if data If there is a change in an already Noted

imports to a closed certified reconciliation, the system
reconciliation (due, perhaps, will decertify it, update the
to a late journal entry)? reconciliation balance so that it is
back in sync with the underlying
GL system, and alert the preparer
of the changes via email.
21
7.4 How does the customer The system will automatically Any failed imports are notified
know if all data was notify the client via email if an to the administrator, who can
successfully imported? If error occurs with an import. In also pick this up from reviewing
the import fails, describe the addition, administrators can view the input status screen
process that follows. the results of all imports and
compare to expected results.
7.5 Is an audit trail / log Yes. Client’s administrators have As above

available that shows the access to an import status screen
process completed. If so, which includes import file name,
describe the details available date and time stamp, job status,
to the customer. lines loaded, and import errors (if
any).
7.6 What ERP systems connect BlackLine can be configured to Noted

with the product seamlessly interface with any
mainstream ERP or GL system as
well as many sub-ledgers in order
to automatically retrieve data.
BlackLine uses standard import
templates for most data imports.
These formats are set-up intuitively
and provide consistency between
different data imports. Files are
sent to an SFTP site in a tab-
delimited text file format. Import
interfaces are scheduled to run
automatically at the client's desired
frequency, with data pulled into
BlackLine accordingly.
For a partial list of successful

integrations by ERP, please visit
https://www.blackline.com/finance-
controls-and-
automation/solutions/by-erp.
7.7 For those that connect, is the BlackLine is a certified Gold Noted
vendor a certified partner? member of the Oracle Partner
Network. We are also a member of
the SAP Partner Edge program as
an SAP Software Solutions Partner
and have a certified SAP Ecohub
partnership. The BlackLine
22

Finance Controls and Automation
Suite for SAP® Solutions is an
SAP-endorsed business solution.
If so:
7.7.1 Does the vendor
provide a Connector for BlackLine offers an SAP
each? Connector for its SAP clients. We
also offer a NetSuite-certified
NetSuite connector. In cases where
BlackLine does not have a pre-built
connector, we configure the data
interface during implementation.
7.7.2 What transactions
will these Connectors The SAP connector allows clients
execute? to extract account balances, AR/AP
sub-ledger balances, GL
transactions, Open Item
Management transactions, and
currency rates from SAP/; format
them appropriately; and
automatically load these items into
the BlackLine application.
BlackLine journals can be posted
back into SAP.
The NetSuite connector can import

account balances, GL transactions,
bank transactions, currency rates,
entities, and saved searches.
7.7.3 Does these
connectors operate on a The connectors run on a schedule
scheduled basis? Please per the client’s request. Journals
explain what these can be posted in real-time.
schedules are.
7.8 Is the application endorsed Yes, the BlackLine Finance Noted

by these partners? Controls and Automation Suite for
SAP® Solutions is an SAP-
endorsed business solution. SAP is
the only partner that currently
provides endorsements.
23

8. Services & Support
8.1 Describe your support model, BlackLine’s application does not Noted
e.g. direct from software require ongoing support from the
house, via VAR, other? client’s technical or IT team. The
subscription fee includes all
aspects of operating BlackLine’s
application including:
• 24/7/365 BlackLine
Customer Service;
• Full provision, maintenance
and support of the online
platform from Blackline’s
technical Team; and
• Client dedicated instance of
the application, supported by
BlackLine.
VAR: Channel partners provide

level 1 support. Level 2 and 3 are
provided by software house.
8.2 If VARs are involved, what BlackLine partners must attend The VAR channel has been
accreditation process does required training and pass the running for a year, so it is “early
the VAR have to take? certification exam to provide days” re assessing the Partner
support to end customers. Channel. There is currently only
one VAR in Europe.
8.3 Is there cost associated with No. Our BlackLine U learning Noted
support? If so, is it management system, our online
compulsory? help functionality, the BL User
Community, and our 24/7 support
is all included. However, if onsite
training is required there will be
an additional consulting fee.
8.4 How does the customer BlackLine support is accessible Noted

contact support? 24/7/365 via email, phone, or
through our online support portal.
8.5 What organisations will When VAR/channel partners are Noted

assist in providing support? involved, they provide level 1
In other words, is any part of support. Level 2 and 3 are
the support process provided by software house.
outsourced?
8.6 Describe your training BlackLine offers online role- Noted
24

programme and by whom it based training, customized
is provided. training, train – the - trainer
programme, end user training, and
BlackLine U which provides all
the necessary tools needed to
learn the entire application. This
is in addition to live webinars
where users can attend and ask
questions of a BlackLine expert.
All training is online and is
provided free of charge. In
addition, many of the training
courses offer free CPE credits.
BlackLine has created role-based
training materials to ensure that
users learn the appropriate skills.
The training is available online at
all times and can be accessed
directly through BlackLine’s
solutions. Once implementation is
complete, the client will be
assigned an Account
Manager/Owner for any
assistance.
Some support may be provided by

BlackLine’s channel partners, as
described in item 8.1 above.
8.7 Is there an additional charge No. Noted

associated with training?
8.8 How is training for new BlackLine delivers new feature There are live webinars, and
features handled? workshops with every new release then followed by live on-line
to ensure that users and training and on-line help
organisations utilise the latest
features. The new feature
workshops are posted within
BlackLine U based on our
software release schedule. They
typically occur every quarter.
These recorded videos are
essential for learning about the
latest features and taking
advantage of all that BlackLine’s
solutions offer.
25
8.9 Is there a charge for No. All online training is Noted

continuing training on new provided free of charge. Onsite
features or functionality? training is available on a
consulting basis.
8.10 What other support services BlackLine provides all backups, Noted
are provided? Is there an disaster recovery, maintenance,
additional cost for these? support of the platform, and all
other additional services to
maintain the instance at no
additional charge.
8.11 What is the frequency of BlackLine releases new features Noted

upgrades? What costs are and enhancements quarterly and
applicable? performs monthly patches to
address maintenance issues. In all
cases, upgrades are scheduled
well in advance, never occur
during the close, and are
performed out of hours with little
impact on the business user. There
is no charge for upgrades or
maintenance and no client
resources are required, including
IT support on the client-side.
Clients are notified well in
advance and are offered related
training classes several weeks
prior to an upgrade or release. If a
client has concerns or questions
related to any upcoming changes
as a result of patches or version
upgrades, these can be relayed to
Blackline support.
8.12 What guarantees does the BlackLine’s uptime target is Noted

supplier give in relation to 100% (excluding emergency and
service availability / uptime scheduled maintenance). This is
/ maintenance? included within our SLAs, and
customers can receive credits for
any downtime under the 100%
uptime service level. ‘Appendix
B –Service Level Agreement,’ in
our standard master subscription
26

agreement provides details:
http://www.blackline.com/assets/d
ocs/uploads/BlackLine-Systems-
MSA-REV-H-4-2.pdf.
8.13 What arrangements are Cloud vendors would not put code Noted
available in respect of in Escrow as clients are merely
ESCROW, where buying a service and do not own
appropriate? any software.
Customer data is of course a

separate issue; the customer data
belongs to the customer.
Our Master Subscription

Agreement includes a 180-day
“sunset clause.” In addition, as
noted in item 5.32, "Customers’
administrative users can export
data from the application in CSV
format." Supporting documents
can also be exported, in their
original formats.
27

9. Enhanced Financial Controls and Automation Platform
9.1 What is the scope of the BlackLine is built to address all Noted
software solution? Does it the financial close processes that
offer a unified platform, exist within the “last mile of
with wide-ranging finance.” This includes the
functionality to address validation of information and
business needs? necessary adjustments before a
client’s financials are published.
BlackLine covers account
reconciliations, analysis of
variance fluctuations, high-
volume reconciliations,
transaction matching,
consolidation reconciliations,
multi-statutory reconciliations,
risk analysis, auditor evaluations,
tracking of control testing, month
end close validations, audit
compliance and completion,
booking of journal entries,
intercompany transactions and
supporting documentation for
management review and control
on financials.
9.2 Are all the elements of the BlackLine was built organically Noted
platform built on a uniform from the ground up on a uniform
or disparate code base (i.e., code base. This provides deep
multiple databases, multiple integration within our platform.
programming languages,
etc.)?
28

10. Software Functionality
10.1 Detail in no more than 500 Most clients use BlackLine for all Noted
words how customers are of their “last mile of finance”
typically using your processes which includes
company’s services.  account reconciliations
 multi-statutory
reconciliations
 consolidation
reconciliations
 high-volume
reconciliations
 month end close tracking
 recurring journal entry
tracking
 audit and compliance
testing and tracking
 variance fluctuations
 booking of journal entries,
etc.
BlackLine’s platform covers the

expansive segment which Gartner
defines as Enhanced Finance
Controls and Automation.
BlackLine currently has over
1,000 clients using its platform.
10.2 How does the product allow Within BlackLine, the client Noted
the finance and accounting controls the settings and
function to be self-sufficient configuration. It is built
when managing, intuitively which allows the
configuring and adjusting system to be managed by business
the application? users and does not require the
client to have its own IT team to
manage the application.
BlackLine provides support and
training with our online help,
documented implementation
guides, 24/7 support team, and our
learning management system,
BlackLine U.
10.3 Is the product intuitive and Yes. BlackLine’s platform was Demonstrated.
29

easy-to-use? developed by accountants, for
accountants. BlackLine was Users are given their own
developed internally, rather than dashboard for each module they
through acquisition or outsourced use. From this it is easy to see
development. The entire product the status of the tasks still
exists on the same code base and outstanding.
is both easy to implement and
possesses a standard UI. Most All items in this can be clicked
importantly, we actively solicit on, drilled into, amended, etc.
and incorporate client suggestions
into our product, with the goal of The style is very consistent from
providing a solution that module to module, with lots of
incorporates best practices from drag and drop, checklists, etc.
many different clients. We want and no program coding to be
the BlackLine application to be seen
robust, but easy and intuitive to
use.
Our "go to" search feature allows
users to immediately go to a
desired page, which limits the
number of page downloads to
navigate within the application.
User-saved filters and settings
allow users to go to the proper
page and role within the
application to easily access the
desired information. BlackLine
also provides keyboard shortcuts
and tab accessibility and simple,
translatable language except
where necessary to convey
technical language. Additionally,
our searchable online help feature
allows users to search an online
directory for assistance. The help
feature combines step-by-step
instructions in understandable
language along with applicable
screenshots for performing most
tasks within the application. This
allows users to easily find what
they are looking for and to move
at their own pace.
10.4 Does the tool include BlackLine comes with nine Noted
standardised templates for standard templates, each of which
different types of account is designed with a particular type
30

reconciliations (e.g., of reconciliation in mind. Clients
suspense accounts, accrued also gain access to a template
expenses, or pre-paids)? Is builder at no additional charge,
there a cost associated with which allows them to configure
custom templates? How their reconciliation templates as
does the product handle they see fit. There is no
varying customer customized work required,
requirements? meaning a client is not reliant on
BlackLine when it wants to make
changes. Finally, each template
offers the option to display
policies and procedures for the
preparer’s convenience and for
audit purposes. See also 11.1.
10.5 How many languages and 15 languages are supported, Currency conversion rates are
currencies are supported? including Chinese (Simplified, zh- uploaded by the client.
CHS), Chinese (Traditional, zh- BlackLine stores these and uses
T), Czech, Dutch (Netherlands), them every time an item is
English, French, German, brought in. Reconciliations are
Hungarian, Italian, Japanese, normally based on month-end
Polish, Portuguese (Brazil), rates determined by the client
Korean, Russian and Spanish.
(Note: 11 are single-byte while 4
are double-byte).
All ISO currency codes are

supported.
BlackLine supports full multi-

currency. Currency types
displayed and translated include
transactional, functional, account,
and reporting. These different
currency GL balances are
imported directly from the client’s
ERP. BlackLine can also
automatically perform currency
conversions when exchange rates
are imported into the application.
10.6 Can supporting Yes. All supporting Noted

documentation and documentations and comments
comments be attached to all can be added throughout the
functional areas of the platform and can be carried
platform? forward to subsequent months
31

automatically. BlackLine can
accept supporting documents in
any file format.
10.7 Is there integration between BlackLine was built on a single, Noted

modules (i.e., can you use integrated code base from the
matching and directly push ground up. This provides an easy-
items from matching to to-use product and provides deep
reconciliation, with no integration between modules
exporting or importing)? without the cumbersome extracts
Discuss the integration and reloads that exist with
between the different competitor products. Integration
aspects (offerings) within between Account Reconciliations
your product? and Transaction Matching allow
for drilling into details and
pushing of unmatched items
directly to the reconciliation.
Consolidation reconciliations are
linked to underlying account
reconciliations. Transaction
Matching functionality can be
used for daily reconciliations and
automated creation of journal
entries. Explanations of variance
fluctuations can link back to the
completed reconciliation.
10.8 How long can client data be Client can store data indefinitely Noted
stored in the application? for as long as the client desires.
We have clients with over 10
years of data on their production
instance.
10.9 Does the tool automatically Yes. BlackLine’s platform offers Noted
date and time stamp key audit trails which track the date
stages in all aspects of the and timestamp for workflow,
financial close processes adding of items/ documents/
within the platform? comments, user logins, and
adjustments to key settings. For
the individual certifications, the
audit trail tracks the user who
completed, the associated level
(prepared, approved, reviewed),
the reason, and the time/date
stamp.
32

11. Account Reconciliations
11.1 Does the platform provide a Yes. BlackLine currently has Example templates reviewed.
built-in library of standard nine “out of the box” account Many templates can be amended
reconciliation templates / reconciliation templates:
tasks? Amortizable Prepaid, Bank
Account, Calculated Balance,
General List, Sub-ledger Match,
Accruable Item, Suspense,
Schedule List, and Associated
Accounts. See also 9.4.
11.2 Can these reconciliation Yes. Clients also gain access to Demonstrated
tasks be edited and/or added our template builder, where
to by the user? reconciliation templates can be
edited to address specific needs.
11.3 What file formats can the All grids within BlackLine can be Noted
application extract to? exported to an Excel or CSV file
and all standard reports can be
extracted to Word, Rich Text,
XML, RPT, Excel, CSV, and PDF
formats.
11.4 Are there standard reports BlackLine’s reporting tool is built Reviewed
and/or dashboards within into the system and has over 90
the platform that enable preconfigured reports with
reconciliations to be filtering and sorting capabilities.
reported on? This includes the Enhanced (ad-
hoc) Reporting which allows
If so please provide details clients to configure reports
of what is available. according to desired fields and
schedule automatic reports. No
additional training is required to
generate reports, and filters are
built-in to allow for further
configuration. These reports cover
all account attributes.
Some of the key reports we
recommend include the following:
• Required Adjustments – This
report displays all the items that
have been identified by the
Preparers as a problem or error.
The client has the visibility to see
the aging and the amount of the
33

items. In addition, the client can
also run this report for historical
purposes and view the period it
took for items to be resolved and
corrected.
• Control Analysis – Everything
in BlackLine is in a real-time
database. If something was
completed just moments ago it
appears immediately, everywhere,
as “completed”. This report shows
when reconciliations were
completed in relation to their due
dates. This is an excellent report
to use in enforcing the company’s
policy regarding the timely
completion of reconciliations.
• Unassigned Accounts – While
the administrator is responsible to
assign the accounts to users, it is
still the responsibility of the
accounting managers to make sure
reconciliations get assigned – and
get completed. This report is a
quick check to ensure all accounts
are assigned.
• Past Due by People – This
provides a quick report that shows
user’s name, phone number, email
address, and what users have not
yet completed. In just a few
mouse clicks, you now have the
ability to reach out and truly
manage the process with greater
control.
• Account Policies and Procedures
– This report indicates the policy,
purpose, and procedure of the
reconciliations. You can quickly
review this report to see if your
users are updating critical areas on
a timely basis. If not, you can take
corrective action before it causes a
risk.
11.5 What user roles are BlackLine has 15 predefined Reviewed drop down lists
34

provided within the roles, each with a distinct, showing these
application? configurable set of permissions
and responsibilities. Broadly,
these roles can be classified into
four categories: accountant,
manager, administrator, and
auditor.
11.6 How are the user roles The client's system administrator Reviewed
administered? assigns all user roles and levels of
access.
11.7 Does the tool have built in Yes. Accounts can be certified Only “Admin” can change the
workflow capabilities? If and reviewed by up to five workflow. Each item has a
so, what is the workflow separate roles. This workflow is “preparer” and an “approver”,
approval process? also automated, meaning that and indeed may have more than
users do not have to notify an one “approver”. Users learn the
approver once they have finished set up process from the initial
a reconciliation. Instead, training. Processes can be set up
BlackLine can use automated one at a time or “en masse”
email alerts to notify the next
person in line. Roles also restrict
data access permissions for
security purposes.
11.8 How does the system BlackLine employs a strict Reviewed

enforce segregation of segregation of duties matrix to
duties? ensure a user does not certify the
same reconciliation over multiple
roles.
11.9 Do any of the accounts have Yes. The business/system BlackLine state the audit trail
system-wide privileges for administrator role has access to all cannot be altered or deleted
the entire system, and if so data stored in the system. They
for what operations? may perform the same tasks as the
local administrator across all
entities and may also modify
system-wide organizational
settings. The distinguishing
attribute between the business and
system administrator is that the
system administrator can modify
user profiles and security settings
while the business administrator
cannot. However, even an
35

administrator cannot certify a
reconciliation, as this would
conflict with the segregation of
duties principle.
11.10 Does the system include Yes. BlackLine offers Noted

auditor roles that allow for external/internal auditor roles with
paperless audits by read-only access.
providing on-line access,
including on-line notes
and evaluations?
36

12. Transaction Matching
12.1 Can data be manipulated? Yes. The client can search for Reviewed
Are there lookups? In desired data with BlackLine's
particular: advanced filtering via working
grids located in all modules. Static
item fields can be populated by
the client to make drop-down
menu items.
12.1.1 Can additional Yes. Users can create their own Noted
matches be ad-hoc matching and add
defined by the additional rules (if so entitled).
user?
12.1.2 Can data from Yes. BlackLine matching imports Noted

multiple external can come from multiple systems,
systems be in multiple file formats. Matching
matched? across multiple data sources is not
a problem.
12.2 How frequently can data be The client determines the data Noted
imported and matched? import and match frequency.
Many clients run the engine
multiple times each hour during
the close.
12.3 How are unique matching In BlackLine's Matching module, Noted

requirements addressed the client has the ability to set up
(out-of-the-box match sets (pre-defined
functionality, or is coding relationships between one, two or
required)? Describe the three data sources), then run
creation of matching logic. BlackLine's matching engine.
Who is the primary owner BlackLine's transaction matching
(IT, vendor, business engine is capable of processing
users)? one million transactions per
minute. Rules can be either
automatic or suggested (i.e.,
requiring approval). Rules can be
run within an account or across
accounts. Clients can match debits
to credits or based on absolute
values. Due to the easy to use
nature for transaction matching,
the business users are the primary
owners.
37
12.4 Can the following types of Yes. BlackLine’s rules allow one- Noted
transactions be matched: to-one, many-to-one, and many-
 One to one? to-many matching.
 One to many?
 Many to one?
12.5 Can it match with variance Yes. Match rules can operate on Noted
for both amounts and dates? any fields in the source data file.
Date, money, and number fields
can be matched within a range of
values. Ranges are set in relation
to a value and can be uni- or
omni-directional (+ 2% or +/-
2%). Ranges can be expressed as
either values or percentages.
12.6 How are transactions Items are automatically tracked Noted

tracked? via workflow and viewable on
real-time reports.
12.7 How are transactions aged? Items are aged based on the Noted
criteria set by the business user.
The aging buckets can be
configured by the client's system
administrator to meet the client's
needs.
38
13. Task Management
13.1 Describe the Task tool. Many companies have found that Noted
checklists and disparate policies
can delay and complicate the
close process. With BlackLine,
they can automate the process of
checking off different steps while
improving efficiency and
visibility for each task.
13.2 Provide an outline of how BlackLine clients utilise the Task Noted
this would be used. Management product for their
close calendar, list of manual
journals, departmental close lists,
compliance controls, and even
their PBC (Prepared by Client)
lists. It allows the setting of
frequencies (i.e. weekly, monthly
or quarterly), due dates expressed
numerically, and dates/times
relative to the accounting period
end. This allows tasks to be
scheduled at precise intervals.
The calendar shows progress
throughout the close and provides
unprecedented visibility into the
close at both a macro and a drill-
down level. Task dependencies
validate processes and execute in
order and on time. The
hierarchical tree of dependencies,
defined by an administrator,
prevents tasks from being
certified before dependencies are
completed. The Task
Management product is designed
to help control month-end close
checklists.
13.3 Can auditors use the tool? Yes. BlackLine offers Noted
internal/external auditor roles with
read-only privileges. Task
Management is ideal for tracking
of items for audit as well as
39

performing and documenting
testing on internal controls.
13.4 Can documents be attached Yes. Drag and drop functionality Documents can be dragged and
/ associated with tasks? is provided to facilitate attaching dropped to a transaction, task,
supporting documentation. journal entry and indeed just
BlackLine can accept supporting about anything
documents in any file format (e.g.,
Word, Excel, etc.).
13.5 Does the platform provide a Yes, Our Controls Assurance Noted
built-in library of standard solution comes with over 100
accounting and finance sample finance and accounting
tasks? sample control activities. This
also includes the COSO (Internal
Controls Framework) compliance
framework along with other add-
on libraries which are being
developed.
13.6 Can these tasks be edited Yes, subject to role-based Noted

and/or added to by the user? limitations. All users may send a
request to the application
Administrator to add a task.
Preparers themselves can add one-
time tasks, and can edit any tasks
to which they are assigned. The
non-preparer roles can only add
comments and/or supporting
documents (and request new tasks
from the Administrator).
13.7 Can users / roles be Yes. The application Noted

assigned to tasks? Administrator assigns users to
tasks.
13.8 Can tasks be prioritised? Yes. Our Task Management Noted

product includes a task
dependency feature, which creates
a hierarchical tree of
dependencies. Defined by a
client’s administrator, these task
dependencies prevent any task
from being certified before
dependent tasks are completed
40

and validate that processes
execute in order and on time.
13.9 Can tasks be associated so Yes. Configurable workflows are Noted

that workflows are created? built in to the BlackLine
application. The BlackLine Task
Management product incorporates
a flexible template structure that
can be adapted to any type of task
workflow. Task dependencies,
frequencies, due dates, and
required levels of approval
establish workflow to ensure the
accurate completion and review of
tasks.
13.10 Can authorisations tasks be Yes. Tasks can be configured for Authorisations are built in as
built into the workflow? the desired level of approval. steps in a workflow
13.11 Can tasks be scheduled at Yes. The client will define the
specific times and/or offset between the task due date
particular dates? and the period end, and BlackLine
will recreate the task based on the
frequency specified (e.g., monthly
/ quarterly / annually / custom
frequency) with the appropriate
due dates. Tasks can be
scheduled in either business days
or calendar days, and holidays can
be included as well. Clients can
also create one-off tasks.
13.12 Can tasks be linked to Yes. The BlackLine Task Noted

specific operations within Management product can be
the platform, e.g. configured to address almost any
undertaking a specific type of task list (e.g., close
match and reporting the calendars, departmental close
results to a user? lists, compliance controls, PBC
lists, etc.). Through BlackLine’s
intermodule dependency feature,
tasks can auto-certified by
completion of the associated
action item – for example,
completion of a reconciliation or
journal could auto-certify the
41

linked task.
13.13 Can automated tasks be set Our Task Management product Noted
to send specific provides email notifications to
communications, e.g. ensure that each task is on track
emails or standard letters? and deadlines are established,
communicated, and met, but our
tasks cannot be configured to
programmatically trigger events
such as sending of emails or
standard letters.
However, Task Management does

manage workflow, though, by
defining a structured sequence of
steps to be followed by all parties
involved (e.g., “prepare
document; review/approve
document; send document”). In
addition, BlackLine can use
automated email alerts to notify
the next person in line, and the
inherent task workflow ensures
that tasks move through the
process and are executed in order.
13.14 Can the system notify Yes. Alert emails are sent as a Noted
users (alerts, e-mails, etc.) daily summary of tasks. Tasks
of future tasks and actions also appear on the user dashboard
required of them? and to-do list.
13.15 Can the status and progress Yes. BlackLine’s task calendar Noted
of tasks be tracked? shows progress throughout the
close. Real-time dashboards and
robust reporting capabilities also
give management immediate
visibility into completed and
outstanding items.
13.16 Are there standard reports Yes. Multiple standard reports Noted
within the platform that are included for task status, and
enable tasks and workflow custom and ad-hoc reports can be
progress to be reported created within BlackLine’s
on? Enhanced Reporting.
42
13.17 Is there an audit trail of Yes. The Task Management Only administrators can carry
changes to tasks? product does include a out this task, and this audit trail
certification workflow audit trail. is only available to them
43

14. Journal Entries
14.1 Describe the journal entry BlackLine’s Journal Entry product Noted
tool. provides a controlled, template
approach to centralising manual
journals. Companies can create,
review, and approve journals, then
electronically certify and store
them with all supporting
documentation. Journals can be
posted to the general (or sub)
ledger systems, in real time, or
one-by-one, or in batch on a
schedule. Moreover, pre-posting
validation eliminates re-work by
preventing Journal Entry rejection
from the general ledger due to
errors.
As an integrated component of
BlackLine’s Financial Control and
Automation platform, the Journal
Entry product ensures seamless
integration of journals with
reconciling items, transaction
matching groups and exception
handling.
14.2 Is there bulk journal entry Yes. BlackLine’s Bulk Journals Noted
creation functionality? tool provides for automatic
allocations of transactions, and
adjustments, which are often large
volume, that require booking.
The bulk journal creation is a
logic-based approach based on
data sources loaded into the
matching library. With logic
applied, clients would only need
to write journal definitions one
time. When new data loads, the
required journal amounts will
automatically calculate. Journal
uploads to the general ledger may
be real time or scheduled, either
one-by-one or in a batch.
Automatic, scheduled uploads can
44

be run every fifteen minutes (or
even more frequently in some
cases). Actual journal status and
numbers are synchronized with
the GL so that BlackLine becomes
the trusted system-of-record.
14.3 Does the system provide Yes. Users can view details of Noted
real-time monitoring and statuses via real-time dashboards
reporting of journal entry and reports.
status?
14.4 Does the system allow for Yes. BlackLine’s Journal Entry Yes, as previously noted
configuration of journal product is heavily configurable,
entry templates with header meaning that virtually any journal
and lines required for template can be mimicked and/or
multiple systems? populated for multiple systems.
14.5 Does the system allow for Yes. BlackLine offers the ability Noted
configuration of user to load validation, dependent
defined validation rules to validation and static description
prevent posting errors? tables to prevent posting errors.
During implementation, validation
rules are set up to align with the
client’s ERP solution and/or the
company’s policies. There are
two types of validations –
independent validation (just
referred to as “validation”) and
dependent validation. Validation
simply validates a single field
against a list of valid values.
Dependent validation allows
clients to restrict posting based on
relationships. For example,
currency codes are restricted by
company codes or legal entities.
Clients can also load static
description tables. If clients want
to add the label of an account
number, they can put that into the
static description table and
BlackLine will populate that
description when an account
number is entered. These
relationships and tables are built
45

during the implementation
process, owned and maintained by
the client. The client’s
administrator can import updated
tables and rules into their
BlackLine instance as needed.
14.6 Is dynamic workflow for Yes. Demonstrated – can be based on

journal approval based on any rules the client wants, e.g.
thresholds available? under £10k just prepared, under
£500k prepared and approved,
over £500k prepared, approved
and reviewed
14.7 Does the system allow for Yes. BlackLine’s Journal Entry Noted
automation of journal entry product is highly configurable,
posting across multiple meaning that virtually any journal
systems? template can be mimicked and/or
populated for posting across
multiple ERPs and/or systems.
14.8 Can the customer easily Yes. Clients can quickly import Reviewed and demonstrated
import journal line detail completed or partially completed
from Excel into the journals from Excel. This is
application? useful when report writers or
third-party systems write
thousands or tens of thousands of
lines to a spreadsheet. Our Bulk
Journals tool can further automate
processes by providing a logic-
based approach to calculate
required journal amounts,
eliminating the need to create and
use formulas in error prone
spreadsheets.
14.9 Does the system allow for BlackLine’s Bulk Journals Noted
the creation of large volume solution provides for automatic
journal entries based on allocations of transactions and
predefined logic? adjustments requiring booking.
Bulk Journals uses a logic-based
approach that works off our
matching and journals modules.
Allocation and look-up tables can
be configured and referenced as a
46

data source in the journal entry
logic. This prompts the automatic
creation of the journal based on
the pre-defined requirements. For
reporting, configurable filters
called “My Views” can be created
to review, summarize and group
data based on types, matching
rules, or any other criteria
included in the data source.
14.10 Can standard recurring Yes. BlackLine journal entry Noted

journal entries be set up functionality includes one-click
within the application? cloning for recurring entries. We
also offer the ability to create a
master journal record which can
pre-populate data and create
entries in periods going forward.
14.11 Does the platform provide Yes, BlackLine journals are Noted
a built-in library of individually configured to a
standard journal types? client’s specific needs, during
implementation; those configured
journals become a client's
personalized library of standard
journal types (e.g., correcting
journals; reversing journals; etc.).
14.12 Can these standard Yes, BlackLine’s journal master is Noted

journals be edited and/or configurable.
added to by the user?
14.13 Can journal approval Yes. Clients can configure the Noted
workflows be created? desired levels of approval.
Dynamic workflow automatically
routes journals to the appropriate
individuals for approval.
BlackLine offers a flexible
workflow approval process which
can be based on amount
thresholds.
14.14 Can journals be posted Yes. BlackLine offers both real- Noted
interactively and/or in a time journal posting and batch
batch? posting.
47
14.15 If batch posting is Yes. Automatic, scheduled Noted

available can this be uploads can be run every fifteen
scheduled? minutes (or even more frequently
in some cases).
14.16 Does the platform allow Yes. Validation rules, Noted

for journals to be relationships and tables are built
validated in order to check during the implementation
that the posting logic is process, owned and maintained by
correct? the client.
14.17 Can external documents be Yes. Supporting documents can Demonstrated

attached/linked to journal be attached or referenced via URL
transactions? links.
48

15. Variance Analysis
15.1 Describe the Variance BlackLine’s Variance Analysis Noted

Analysis module. product replaces the spreadsheet
fluctuation analysis that is
manually completed by many
companies as part of their risk
identification and mitigation
process. Using Variance Analysis
is straightforward. The business
owner first identifies which
accounts need monitoring with
user-defined parameters, such as
account ranges and types, entity
filters, balance and percentage
thresholds, and comparison
periods. Whenever new balances
are imported into BlackLine, the
rules engine is executed, creating
variance analysis templates for the
accounts that deviate from defined
parameters.
15.2 Does the system track and Yes. The Variance Analysis Noted
analyse account variation product supports automated,
and budgets/forecasts rules-driven monitoring. The
against actuals for both client defined rules can be applied
P&L and balance sheet to both balance sheet and P&L
accounts by replacing accounts for budgeted vs. actual,
manual, spreadsheet- forecasted vs. actual, YTD,
dependent processes with month-over-month, quarter-over-
business logic? quarter, and year-over-year
comparisons- eliminating the need
for manual and error prone
spreadsheet analysis. Client-
defined rules precisely identify
unexpected fluctuations across
target entities and account groups,
types, or ranges.
15.3 Does the system fully Yes. BlackLine's Variance Noted. Examples were set up
support fluctuation analysis Analysis product allows for the and worked through, e.g. rules to
for multi-currencies and establishment of configurable compare the current month’s
multi-entities? rules (by % and/or amount balance to any prior periods.
thresholds) which triggers the These can be by accounts or
need for an explanation of the group of accounts. Variances
49

balance fluctuation. These can be documented and reported
metrics can be filtered and on
exported to Word, Rich Text,
XML, RPT, Excel, CSV, and PDF
formats.
15.4 Does the system allow for Yes. Automated workflow Noted
client-defined rules to ensures that variance analyses are
identify unexpected assigned to the people most
fluctuations across target familiar with the accounts, so an
entities and account groups, explanation can be given for each
types, or ranges? material variance. Once variance
analyses have been completed and
certified with supporting
documentation attached, users can
roll up and report on this
information.
If so:
 Can the rules Yes; all three scenarios are Noted
calculate and supported.
monitor for
fluctuations in
value, percent
change, or a
combination of the
two?
 Can alerts (tasks) be Alerts are not created; instead, the Noted
automatically variance analysis work item is
triggered if created and automatically
fluctuations are assigned to the appropriate user.
outside of user-
defined
tolerances/limits?
15.5 Once a fluctuation is Yes. The variance explanation is Noted

identified, does the system automatically triggered and
automatically allocate tasks assigned to the preparer. This is
to users for explaining the displayed on the user’s dashboard
variance, route those and follows the established
explanations to workflow and approvals for the
management, and roll the variance explanation.
results up into real-time
dashboards and reports?
50
15.6 Can the customer upload Yes. Supporting documents of Noted

and store documents and any file type can be uploaded.
attachments in support of
the fluctuation analyses?
15.7 Can the customer create Yes. Users can create variance Noted
standard variance codes for items, which represent a certain
use in reports to help to identified fluctuation. Each
monitor and gauge the variance item also has a
impact of trends across the configurable item type (i.e., code)
entire organisation? used to create standard coding,
allowing management to gauge
the impact of an event or trend on
its books.
15.8 Can the customer target Yes. Flexible variance account Noted
groups of accounts and grouping allows clients to target
monitor their fluctuation in and roll-up accounts for analysis.
combination or in relation
to each other?
51

16. Consolidation
16.1 Describe the consolidation BlackLine Consolidation Integrity BlackLine is not a consolidation
process. Manager (CIM) should not be system, rather it compares
considered a consolidation tool. consolidation entries. It
Our CIM product is used in the highlights where there are
close processes as follows: variances and these are used to
identify issues so they can be
BlackLine’s Consolidation sorted. It auto-certifies those
Integrity Manager (CIM) product items that match.
gives companies the ability to
automate system-to-system
reconciliations. This is invaluable
if a company has a consolidation
system and multiple source
general ledgers feeding into it.
Before BlackLine, the
reconciliation process typically
included an extract and manual
comparison of balances from both
systems, a procedure often
complicated by the roll-up
process. The Consolidation
Integrity Manager automates these
processes and automatically
verifies that data used by and
conveyed between the different
systems is properly transferred
and reconciled.
With the CIM product,

relationships are defined between
the different systems so that, for
example, all cash accounts in a
general ledger might roll up to a
single cash account in a
consolidation system. If the totals
match or are within a certain
tolerance of each other, the
system can automatically certify
that particular account
reconciliation. This allows the
accountant or financial analyst to
focus on the exceptions where
late-posting journal entries and/or
top side adjustments have
52

changed the balances on one side
or the other.
16.2 Does the platform automate Yes. Data from virtually any Noted
the system-to-system third- party system, including all
reconciliation process to major consolidation tools such as
compare single and multiple Hyperion, SAC BPC, can be
ledgers within a central imported into BlackLine on a
consolidation system? scheduled basis. BlackLine
allows clients to automate uploads
from GL and consolidation
systems; create many-to-one
relationships between general
ledger and consolidation accounts;
auto-certify reconciliations that tie
out; create links to journals that
result from the tie out process. In
addition, BlackLine will
automatically decertify and send
notifications if balances change
on certified reconciliations.
16.3 Can the user group accounts Yes. Noted

together to easily map
general ledger accounts into
the consolidation module
and reconcile at any level?
16.4 Can the user easily define Yes. Noted

relationships between
accounts within different
systems and reconcile at
any level by grouping
accounts together?
16.5 Does the platform Yes. Noted

automatically subtotal all
grouped accounts and
associated items?
16.6 Does the platform auto- Yes. BlackLine can auto-certify Noted
reconcile where accounts when the general ledgers and
are in balance? consolidation systems balances
tie-out (equals the sums of the
underlying GL balances) or are
53

within an established threshold.
16.7 If an account balance Yes. BlackLine provides for Noted

reconciled within the automatic decertification and
consolidation module notifications if balances change
subsequently changes will on certified reconciliations. When
an alert (task) be a decertification on a balance
automatically generated by occurs, an automated email will
the platform to warn the be sent to the responsible user.
user that their consolidation
may no longer balance?
16.8 Can the platform easily Yes. With real-time dashboards, Noted
identify late journal entries reports and embedded controls,
and provide reports of BlackLine allows users to monitor
adjustments by date? every topside journal entry to
ensure late adjustments are not
missed.
16.9 Will journal entries and/or Yes. Item classification and aging Noted
other items supporting is inherent to the BlackLine
differences in balances be application. All items are aged.
tracked and aged BlackLine provides dashboard
automatically, offering reporting which displays the aging
management full visibility and size of key line items and also
into the consolidation filterable fields showing absolute
reconciliation process? values of GL balances. BlackLine
also offers several reports that
return key items violating aging
and/or amount thresholds.
16.10 Can the platform provide The face of the consolidation Noted
a report that shows all the reconciliation itself shows the
underlying accounts underlying accounts.
contained/mapped to a
consolidation
reconciliation?
54

17. Intercompany
17.1 How does the platform BlackLine handles intercompany Noted

address intercompany transactions as requests which
reconciliations and link will be validated, supported and
with “account properly routed for the proper
reconciliation” noted in approvals. Once both sides of the
section 11? transaction are in agreement,
BlackLine will process the journal
If automated processes are entries via configurable rules
used please describe these, which will send journal entries to
the related controls and note a single or multiple ERP systems
the efficiencies arising. for posting.
17.2 How does the platform BlackLine’s Intercompany Hub Noted

address the posting of ensures this through sender and
intercompany transactions? receiver approvals, journal
validations, and automated
booking of journal entries to
source ERP system(s).
17.3 Does the system provide an Yes, through BlackLine’s Noted

approval process to ensure Intercompany Hub. Instead of
that manual intercompany addressing discrepancies after-
transactions undertaken the-fact, BlackLine handles IC
within the platform are transactions as requests which
correctly requested in such will be validated, supported and
a way that they are properly routed for the proper
reviewed, documented and approvals.
booked on both sides of the
transaction?
17.4 Can intercompany Yes. Because the agreement Noted

transactions be addressed at occurs on the front-end and the
initiation to eliminate entries are booked automatically,
reactive manual effort clients can avoid all the manual
needed to identify labour involved with tracking
discrepancies and one-sided down discrepancies and one-sided
bookings? bookings (which is typically done
in the month following the
original booking).
17.5 Can intercompany entries Yes, our Intercompany Hub is Noted

be configured to meet local built to customise processes
business needs, including through client-controlled
55

feeds to multiple ERPs? configuration instead of vendor
controlled custom coding. Within
the Hub, entries can be
established for each type of
service and transaction type,
allowing for configurable
validation rules and GL string
elements that match your unique
requirements.
17.6 Can there be one-sided No. As a control, one-sided Noted

postings? postings are prevented with the
use of BlackLine’s Intercompany
Hub.
17.7 Describe any audit trail All history is retained for Noted
available. intercompany activities (both
sides), including supporting
documentation.
As with other BlackLine modules,

the Intercompany Hub allows for
supporting documentation. That
documentation becomes part of
the history retained for
intercompany activities.
56

18. User Documentation
This section applies to any of: online, hardcopy or other (e.g. WWW) documentation – specify which are
applicable.
The BlackLine user documentation is online, embedded within the application.
18.1 Is the manual clearly laid Yes. BlackLine’s online help Agreed. The on-line help is very
out and understandable? feature is structured and indexed. comprehensive. The search
process seemed to work well, it
was easy to get around with a
useful table of contents and very
intuitive together with plenty of
screen shots
18.2 Is the manual Yes. BlackLine documentation Agreed

comprehensive and addresses the needs of both end
accurate? users and application
administrators and is updated on
an ongoing basis.
18.3 Is there an index to the Yes. Agreed

manual?
18.4 Is it easy to locate specific Yes. The BlackLine help function Agreed
topics in the manual when which is both indexed and
required? searchable.
18.5 Is it easy to follow through Yes. Agreed

all procedures in the
manual?
18.6 Does the manual include:
18.6.1 A tutorial section? Yes. The help function includes Agreed

numerous tutorial samples (e.g.,
Sample Account Reconciliation:
Checking; Example Account
Reconciliation: Prepaid Rent).
18.6.2 A guide to basic Yes. The help index and search Agreed
functions? function make it easy to find
reference materials on basic
functions.
18.6.3 Pictures of screens? Yes. Agreed
57
18.6.4 Completed Yes. Agreed

examples?
18.6.5 “Error correction” Yes. The documentation includes Agreed

procedures? procedures for common errors and
problems such as forgotten
passwords and lockout.
18.7 Does the documentation Yes. Agreed

clearly specify the actions
to be taken by users at each
important stage of
processing?
18.8 Are help screens available BlackLine provides “bubble help” Noted
relating to the task in hand? explanations that appear to
(context sensitive help). explain key screen fields and
controls, when a user hovers the
mouse over the item (aka “hover
text”).
18.9 Do they provide on-line Yes. The help tool includes Agreed
instructions on how to use sections on application features,
particular features of the and on-line recorded training
software? sessions are accessible as well, via
URL links from the application.
18.10 Can they be edited or No. However, customers can Noted

prepared by the user? If embed their policies and
so, can the user add-in procedures in the accounts, and
their own notes / BlackLine can develop a client-
terminology? specific customised help file, on a
consulting basis.
18.11 How often is the Documentation is updated on an Noted

documentation updated? ongoing basis.
18.12 Will the Software House No. No. as this is an on-line system
make the detailed program and there are no third party links
documentation (e.g. file
definitions for third party
links) available to the
user, either directly or by
deposit with a third party
58
59

Blackline Accreditation Questionnaire Final - 151218 PDF

Diunggah oleh

Informasi Dokumen

Judul Asli

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

Blackline Accreditation Questionnaire Final - 151218 PDF

Diunggah oleh

Hak Cipta:

Format Tersedia

ICAEW Accreditation Scheme

Online Financial Controls and Automation Software

Enhanced Financial Controls and Automation Platform

Evaluation carried out by John Oates

Date completed: 18 December 2015

Signed: John Oates

2 Approach to evaluation ……………………………………………………… 3

3 Matters to consider before purchase ……………………………………….. 4

4 Evaluation conclusion ……………………………………………………….. 8

5 System Security and Access Controls ……………………………………… 10

7 Data Import Process .………………………………………………………... 21

8 Services & Support …..……………………………………………………… 24

9 Enhanced Financial Controls and Automation Platform …………...……. 28

10 Software Functionality ………………………………………………...……. 29

11 Account Reconciliations …………………………………………………….. 33

12 Transaction Matching ………………………….…………………………… 37

13 Task Management ……………………………….………………………….. 39

14 Journal Entries ……………………………………………………………… 44

15 Variance Analysis ………….………………………………………………... 49

18 User Documentation ………………………………………………………… 57

1.2 Fundamentally, SaaS accounting platform should:

 Be capable of supporting the accounting functions for which it was designed

It is also desirable that good accounting software should:

 Be easy to learn, understand and operate

It is essential, when SaaS software is implemented, for appropriate support to be available 24

2.2 Approach and Work performed

2.3 Software/hardware utilised

2.4 Report structure

3 Matters to consider before purchase

3.1 General overview

3.2 Supplier background

3.3 Product background and Suitability for user

3.4 Typical implementations

3.5 Vertical applications

3.6 Software specifications

3.6.1 Development environment

3.6.2 Server platforms

In light of recent EU legal decisions, as an alternative to Safe Harbor, BlackLine now

Microsoft SQL Server Database

3.6.4 Operating software

ASP.NET 3.5; SQL Server 2014

3.6.5 Minimum client PC specification

Any machine capable of running a modern ‘Web Browser’

3.6.6 Support and maintenance

BlackLine is a SaaS offering. All maintenance is provided in-house by BlackLine personnel.

3.7 Software installation and support

3.8 Partner network and related accreditation process

Business Process Outsourcing Partners

BlackLine Technology and Implementation Partners

BlackLine Affiliate and Referral Partners

“BlackLine Affiliate and Referral Partners introduce BlackLine to prospective customers

Question Supplier Response Evaluator’s Comment

5.3 Has the vendor achieved BlackLine is annually audited to Noted

5.4 Has the vendor achieved Yes. BlackLine is ISO Noted

5.5 Describe the tools, BlackLine uses firewalls, Intrusion Noted

5.6 Are information security Yes. All information security Noted

Question Supplier Response Evaluator’s Comment

5.7 Is there a documented Yes. Noted

BlackLine conducts annual DR tests.

5.8 What is the Recovery BlackLine has a defined a one-hour Noted

5.9 Is antivirus software and Yes. Antivirus and antimalware Noted

5.11 Is an Intrusion Detection Yes. BlackLine uses IDS tools to Noted

Question Supplier Response Evaluator’s Comment