Security

• Encryption in transit — HTTPS only in production (HSTS).
• Tenant isolation — every record is scoped to your organization and cross-tenant access is blocked and logged.
• Least data — we import clients, contacts, invoices and payment status only.
• No writes to your books — we only read invoices, contacts and payment status. (Where a provider only offers a broader accounting scope, we still never write.)
• Passwords — stored with scrypt hashing; sessions are HttpOnly cookies with CSRF protection.
• Audit log — drafts, approvals, replies, payments and settings changes are recorded.
• Human approval — no reminder is sent without an explicit approval.
• AI — AI inputs are limited to the invoice context needed for a draft; outputs are checked by guardrails before you see them.

Report a security concern via support; it is routed directly to a person.