company
Security at InvoyFlow
Your invoices and client data deserve enterprise-grade protection.
InvoyFlow is built on Supabase with row-level security so each account only accesses its own data.
All traffic is encrypted in transit (TLS). Data at rest is encrypted by our cloud provider.
Payment card data never touches InvoyFlow servers — Stripe and PayPal handle PCI-compliant processing.
Team roles limit access: accountants get read-only views; staff cannot change billing settings.
We monitor for suspicious activity and patch dependencies regularly.
Security practices
Authentication
Secure password auth via Supabase Auth with session management.
RLS policies
Database-level isolation between accounts.
Payment security
Stripe Connect and PayPal for PCI-compliant checkout.
Backups
Automated database backups via managed infrastructure.