200% secure
Security and data protection at Invoice Office
Your administration is your business: what you charge, who you charge and what you earn. Here is exactly how it is protected, where it is processed, and what we will and will not promise about it.
Free plan available · 14-day trial on paid plans · No credit card
How we protect it
Protected by default, not by upgrade
Encryption, backups and EU processing are not a premium tier. They apply to every account, including the free one, because security you have to buy is not security.
- Where data is processed
- EU onlyWhere data is processed
- Uptime we aim for
- 99.9%Uptime we aim for
- Backups
- AutomaticBackups
- Your data stays inside the EU
- Your administration is processed within the European Union, and transfer outside the EU is prohibited under our processing terms. Where your data lives is not a detail you have to go digging for.
- Encrypted connection, every session
- Invoice Office is served over HTTPS, so everything between your browser and your account — invoices, customer records, logins — travels encrypted rather than in the clear.
- Your password is stored encrypted
- We never hold your password as readable text. It is stored encrypted, which is why a password can be reset but never looked up and read back to you.
- Automatic backups
- Backups run automatically on every plan, including the free one. Protecting your administration is not something you have to remember to do, or pay extra to get.
- You decide who sees what
- Add colleagues as software users, team members or guest users, so people get the access their job needs and nothing more. Access is something you control, not something you file a request for.
- A Security Center in your account
- Your account has its own Security Center — the one place to reset your data or close your account. Destructive actions live behind one deliberate door instead of being scattered through the settings.
In plain terms
What we promise, and what we do not
Plenty of security pages are a wall of reassuring words that quietly avoid the hard questions. These are the commitments in our actual contract — including the places where it says we cannot promise something.
We are your Processor under the GDPR
Invoice Office acts as Processor within the meaning of the GDPR, and processes personal data only to deliver the service — never for our own purposes. Articles 17 to 24 of our terms form the Processing Agreement, so you do not need to chase us for a separate document.
Your data is not sold or passed on
Personal data is not provided to third parties unless we are legally required to. It is treated confidentially, and kept no longer than the purpose it was collected for requires.
We aim for 99.9% uptime — we do not guarantee it
Our terms say plainly that hosting availability is not guaranteed. What we commit to is aiming for 99.9%, monitoring around the clock and fixing malfunctions as quickly as we can. An honest number beats a promise nobody can keep.
Security is shared, and we say so
We take appropriate technical and organisational measures, and our terms are honest that no measure is effective in every circumstance. A strong password and sensible user roles on your side are part of the same job.
Your side of it
Three things worth doing today
Step 1Use a strong, unique password
The single biggest thing in your control. A password reused from another site is the most common way an account is lost, and it is the one risk no amount of encryption on our side can cover.
Step 2Give each colleague their own login
Add people as software users, team members or guest users rather than sharing one account. Everyone gets the access their role needs, and leavers can be removed without changing a shared password.
Step 3Know where the Security Center is
Resetting your data or closing your account both happen there, and nowhere else. Worth knowing before the day you need it.
Security questions, answered
Where is my data stored and processed?
Is Invoice Office GDPR compliant?
Is my connection to Invoice Office encrypted?
Can Invoice Office staff read my password?
Are my invoices and customer data backed up?
Do you sell my data or share it with third parties?
What uptime can I expect?
How do I delete my data or close my account?
More answers in our FAQ and help center.
Related
The documents and controls behind all of this
Your administration, kept in the EU
Encrypted, backed up and covered by a processing agreement from the day you start. Free to try, and no credit card to do it.