Invoices contain your suppliers, your customers, your prices and your bank details. Here is plainly how that data is stored and who can reach it.
Each customer's data lives in its own database schema, not mixed into shared tables. Every request is scoped to the account it came from, so one customer cannot read another's invoices.
Passwords are stored as PBKDF2-HMAC-SHA256 hashes, never in readable form. Sessions use signed tokens that expire, and optional two-factor codes by email.
Admin, user and approver roles decide what each person can see and do. Approvers are limited to the risk severities assigned to them.
The application, database, document storage and AI services all run on Azure, with encryption in transit over HTTPS and encryption at rest.
Invoice files are held in Azure Blob Storage and served through short-lived links, so a URL cannot be shared and reused indefinitely.
Uploads, approvals and rejections are recorded against the user who performed them, with a verification report available as a PDF.
If you connect your own systems, you generate the key yourself and can revoke it at any moment.