How Your Data Is Kept Safe
Where your records are stored, who can reach them, how they are backed up, and what we do not do yet.
What keeps it safe
Stored in India
Your invoices, payments and records are stored in Google Cloud's Delhi region, and so are their backups.
Encrypted on the way and at rest
Every page and every request travels over HTTPS, and a plain http address is sent to it. Google Cloud encrypts everything it stores.
Your company's records are yours alone
Every read and write is checked on Google's servers, not in your browser. Someone in one company cannot reach another company's records, and only our own server can add a person to a company.
Sign-in handled by Google
Sign-in runs on Google's Firebase Authentication, so we never see or store your password. A forgotten password is reset by email.
Payments through Razorpay
Card and UPI details are entered on Razorpay's own page and never reach our servers. The price is worked out on our server, so it cannot be changed in the browser.
Backed up every night
A copy of your data is made every night, kept for 30 days and stored in India, and restoring from it has been tested. The database itself is protected from being deleted by mistake.
Records you can trust
Invoices and expenses can go through an approval before they count. If two people edit the same record, the second save is stopped rather than overwriting the first. A deleted invoice can be restored, a filed GST period is locked, and every record keeps who created it.
What our staff can see
A small number of Invovibe staff can view an account to help with support. They cannot change your records. A change to your plan is made by our server and logged with who made it.
Email that is hard to forge
Mail from Invovibe is sent from our own domain and signed, with SPF, DKIM and DMARC set, so a forged message claiming to be from us is far easier to catch.
Keys kept out of the code
Payment and email keys are kept in Google Secret Manager, one secret each, and never in our code.
Roles decide who sees what
Everyone you invite gets a role. These are what each role may do by default; an owner can adjust a role's permissions for their own company.
| Role | Raise invoices | See every invoice | Approve invoices | Bank and finance | Manage the team | Change settings |
|---|---|---|---|---|---|---|
| Owner | check_circle | check_circle | check_circle | check_circle | check_circle | check_circle |
| Admin | check_circle | check_circle | check_circle | check_circle | check_circle | check_circle |
| Editor | check_circle | check_circle | cancel | check_circle | cancel | cancel |
| Manager | check_circle | check_circle | check_circle | check_circle | cancel | cancel |
| Finance | cancel | check_circle | check_circle | check_circle | cancel | cancel |
| Staff | check_circle | cancel | cancel | cancel | cancel | cancel |
| Viewer | cancel | check_circle | cancel | cancel | cancel | cancel |
| Accountant | cancel | check_circle | cancel | check_circle | cancel | cancel |
What we do not do yet
Not available today
Questions about security
Where is my data stored?
In Google Cloud's Delhi region, and so are its nightly backups. A few of our server functions run in Google's US region, so some requests are processed there before the result is stored in India.
Can someone from another company see my data?
No. Every read and write is checked on Google's servers against the company the person belongs to, and we test that boundary with real accounts.
Can Invovibe staff see my data?
A small number of our staff can view an account to help with support. They cannot change your records, and a change to your plan is made by our server and logged with who made it.
What happens if something is deleted by mistake?
A deleted invoice can be restored from the app. Beyond that we keep a copy of everything from every night for 30 days, and can put back a single record or a whole account from it. Write to support.
Do you store my card details?
No. Card and UPI details are entered on Razorpay's page and never reach our servers.
What happens to my data if I stop paying?
Nothing is deleted. When a paid plan ends you keep it for seven more days, then the company moves to the Free plan with all of its records. If you close your account, your data stays available for export for 90 days and is then deleted, apart from the records tax law requires us to keep — as the privacy policy sets out.
Found a security problem?
Write to security@invovibe.online with what you found, where, and the steps to reproduce it. Please do not test against other customers' data.
security@invovibe.online