Security and privacy
Your business records stay private
How Invoistic protects your company’s data, your clients’ information, your files and your payments.
Security controls
Company data kept apart
- Every record belongs to one company and access is checked on each request
- Database row-level security as a second barrier
- Roles decide what each person can see and change
Files and documents
- Uploads are scanned for malware before they are released
- Files are stored privately and opened through short-lived links
- Client document links are private, expire, and stop working when a document is voided
Sign-in and staff access
- Passwords are handled by Amazon Cognito; we never see them
- Invoistic staff use a separate sign-in with multi-factor authentication
- Staff actions on customer accounts are logged
Payments
- Card details are entered in Square’s own secure fields, never on ours
- Client payments go to your own Square account
- Payment events from Square are verified by signature before they change an invoice
- Connected Square account tokens are stored encrypted
Read our Privacy Policy. Report a security concern to support@invoistic.com.
Send your first invoice today
Free to start, no credit card. No fee on the payments you collect.