Security & backups
Security is a feature you only notice when it is missing.
Your books contain prices, margins, customer phone numbers and tax records. Access, backups and data handling are treated as part of the product, not an afterthought.
Roles, not guesswork
Owner, staff and read-only CA logins. The owner ticks what each person can open, and the server checks those permissions on every request — not just in the screen.
One session at a time
Signing in somewhere new ends the previous session. Repeated wrong passwords lock the login temporarily; repeated lockouts need the platform administrator to verify and unlock.
Two-step login
Password plus an authenticator app for the people who can change settings, money records or user rights.
Encrypted in transit
HTTPS everywhere, strict security headers, a content security policy, CSRF protection and prepared database queries.
Weekly encrypted backup
A full AES-256-GCM database backup every week, with the last five copies retained. A restore brings back the whole database after taking a safety copy first.
Audit trail
Changes to bills, payments, stock and settings are written to an activity log the owner can read.
What a backup contains
The full platform database: every business, user, invoice, party, item, stock movement, payment, expense and setting. Restoring is all-or-nothing, not one shop at a time.
Files outside the database — such as uploaded mobile archives — are handled separately and are not inside the encrypted database backup.
What a backup is not
It is not a point-in-time replica. A restore returns the database to the moment of that backup, so entries made after it are not included. Keep statutory documents as the law requires, and export what you need before a restore.
Questions
Security, answered plainly.
Who can see my business data?
Only the logins you create for the business, with the areas you allow. Platform administration is limited to running the service; it is not a shop login.
What happens if I lose my phone?
Sign in on a new device and the lost session ends. Change the password and ask us if a login needs to be unlocked.
Can I get a copy of my data?
Invoices, ledgers, reports and stock summaries can be downloaded from the app. Contact us for a larger export.
Boring security is the good kind.
If a customer, auditor or CA asks how the books are protected, these are the answers.