Security and your data

Where your data is processed

We use trusted infrastructure providers (Cloudflare, Neon, Upstash and Resend) to run the service. Some of them process data outside India, for example the primary database in Singapore. The full list, purposes and locations are in the privacy policy. We remain responsible for your data and require these providers to protect it.

Encryption

Data is encrypted in transit and at rest. Uploaded files are compressed and then encrypted with a key specific to your business, held in a managed key service. Your original uploads are never altered.

Your books cannot be quietly changed

• Every entry balances, or it is not saved.
• Posted invoices are never edited. A correction is a reversal plus a new entry.
• The audit log records who did what and cannot be turned off.
• Our support staff can view what is needed to help you but cannot write to your books.

Backups and leaving

Encrypted backups run on a schedule. You can also download a password-sealed backup file yourself. Full export is free on every plan.

Report a security issue

Write to [email protected]. See also the privacy policy.