Security

Your invoices are your business

Invoice Hub holds the figures that matter most to an exporter. Here is how we keep them in the right hands.

Access

There is no public sign-up. Organisations are created by us; your administrator adds each user.

Users can protect their account with a time-based code from an authenticator app. An administrator can reset it if a phone is lost.

Sign-in attempts are rate-limited per network address and per account, and the same message is shown for a wrong password or an unknown email.

Disabling a user, changing their role or suspending an organisation takes effect on their next request, not their next sign-in.

Your data

Every read and write is scoped to the signed-in user’s organisation, so one customer’s companies, buyers and invoices are never visible to another.

Permissions are checked on the server for every page and action. Hiding a button is a courtesy; the server is the enforcement.

Sign-ins (successful and failed) and changes are recorded per organisation for your administrators to review.

Password-reset tokens are stored hashed, expire after 60 minutes, work once, and are rate-limited per address.

Platform

All traffic is served over HTTPS; plain HTTP is redirected.

Every state-changing request must carry a per-session token, so another site cannot act on your behalf.

The client copy of an invoice is generated separately from the CA copy, so internal figures such as bank charges never leak onto it.

Need our security answers for a vendor review? Ask us and we will walk your team through them.

Have a security questionnaire?

Send it over. We will go through it with you as part of your walkthrough.