How we keep your data safe
Your invoices, customers and accounts are your business. Here is exactly how we protect them.
Encrypted connections
The website and the app are served only over HTTPS (HSTS), so everything you send is encrypted in transit. A strict Content Security Policy blocks scripts from other sites.
Every record belongs to one business
All business data is stored with its business ID, and the app refuses to show a record to anyone outside that business — checked on every request, and covered by automated security tests.
Roles and permissions
Owner, manager, accountant and staff roles. Owners decide who can create invoices, see reports, manage stock or change settings.
Nightly encrypted backups
The database and stored files are backed up every night into password-encrypted archives, and backups are monitored.
Your data is yours
Owners can export all their business data at any time. If you close your account, we keep GST records only for the period the law requires.
Payments without card data
Plan payments are made by UPI or through Razorpay. Invoiqo never sees or stores your card details.
Passwords and sign-in
Passwords are stored as one-way hashes, sign-in attempts are rate-limited, and staff accounts can be switched off instantly.
Monitored service
Automatic health checks watch the database, background jobs, scheduled tasks and disk space around the clock.
Found a security problem? Email support@invoiqo.in. Read our privacy policy.