Security
Security built around company isolation.
InvoiceFlow handles marketplace order and invoice data, so access boundaries and credential handling matter. These are the controls implemented in the product, described without certification claims.
Encrypted connections
Marketplace refresh tokens and API credentials are encrypted at rest with the deployment credential key. Secrets are never returned to the browser.
Company-level isolation
Orders, invoices, customers, integrations, reports, team membership and billing are scoped to a company workspace. An arbitrary company ID is not trusted without active membership.
Session security
HttpOnly access and refresh cookies, server-side revocation, refresh-token rotation, password reset session revocation and origin validation for state-changing requests.
Role-based access
Owner, admin, accountant, staff and viewer roles are enforced server-side for billing, integrations, settings, invoices, credit notes and team operations.
Immutable financial documents
Issued invoice financial fields and items are protected by database constraints. Corrections use credit notes; issued documents are not silently rewritten.
Secure payments
Paid subscriptions use Stripe-hosted Checkout and the Stripe Customer Portal. InvoiceFlow does not receive or store raw card numbers.
Audit trail
Relevant invoice, team, integration and billing events are written to an audit log. Customer PII and secrets are not written into audit descriptions.
Production transport
Production is served over HTTPS with security headers. PostgreSQL and Redis are not exposed as public services in the Compose topology.
Backups
The deployment includes a documented, operator-run PostgreSQL backup and restore procedure. Automated scheduling and off-site retention are not claimed unless the operator enables them.
Certification statement
InvoiceFlow does not claim SOC 2, ISO 27001, GDPR certification or marketplace certification. No independent security certification has been asserted. Security questions and vulnerability reports can be sent through the contact page.
InvoiceFlow
Use a workspace with clear boundaries.
Start with 50 invoices per month. No credit card required.