InvoiceFlows

Security

How we protect your data and business information.

InvoiceFlows is a cloud-based software service that helps freelancers and small businesses create invoices, manage clients, track payments, and monitor business performance through business intelligence and AI-powered insights.

Security is a core part of how InvoiceFlows is built and operated.

Encryption in Transit

All communication between your browser and InvoiceFlows is encrypted using HTTPS/TLS. Your data is never transmitted in plain text.

Encryption at Rest

Your data is encrypted at rest in our cloud database. Invoice data, client information, and business details are stored securely.

Authentication

Passwords are never stored in plain text — they are hashed using industry-standard algorithms. We use secure session management with automatic token rotation.

Access Controls

Your data is isolated per account using Row Level Security (RLS). No other user can access your invoices, clients, or business profile.

Infrastructure

InvoiceFlows is hosted on Vercel (application) and Supabase (database), both maintaining their own security certifications. Your data is not stored on personal servers.

Responsible Disclosure

If you discover a security vulnerability, please report it responsibly before public disclosure. Contact us at security@invoiceflows.app. We will respond within 48 hours.

Security Contact

security@invoiceflows.app