How we protect your invoice data
The concrete technical and organizational controls behind the Service, written in plain language. Every claim on this page maps to production code or a named sub-processor.
Transport Security
All connections use enforced HTTPS/TLS. No unencrypted connections are accepted at any endpoint.
Credential Storage
API keys are hashed with SHA-256 before storage. We never store plaintext credentials. ERP integration tokens (QuickBooks Online, Xero, Zoho Books) are encrypted at rest using Fernet symmetric encryption with a server-held key.
Data Isolation
Each workspace's invoice data is scoped at the query layer. No cross-tenant access path exists. Files are stored per-workspace in Cloudflare R2 (US region) and extracted data is scoped per-workspace in our Postgres database.
Access Controls
Four-tier role-based access control across all features: Owner, Admin, Member, and Read-only. Permissions are enforced at the API layer, not just in the UI. Every significant action is logged.
Data Retention
You choose how long we retain your original uploaded files: 7 years (recommended, IRS-aligned), 3 years, 1 year, or Permanent. Extracted data is retained for the life of your account. Expired files are hard-deleted by automated retention jobs.
Infrastructure Security
CSRF mitigation via Origin/Referer validation on all state-changing requests. Per-user rate limiting on upload endpoints. Security headers enforced on every response.
Every control on this page is a visible setting — not a marketing claim.
Retention windows, four-tier role-based access, and a full audit trail of every significant action. Procurement and compliance reviews can verify each one inside a trial workspace.
File retention
Choose 7 years (IRS-recommended), 3 years, 1 year, or Permanent. Extracted data is always retained; original files are hard-deleted on expiry.
Four-tier RBAC
Owner, Admin, Member, and Read-only. Permissions are enforced at the API layer — not just UI gating.
Audit log
Every significant action — uploads, exports, team and client changes — is logged with user, timestamp, and context. Exportable to CSV.
Every service that touches your data
Named by role, with the region they operate in. All core infrastructure is hosted in the United States. See our Privacy Policy for the full disclosure including what each provider does with your data.
| Provider | Role | Region |
|---|---|---|
| Azure Document Intelligence | Primary OCR / layout extraction | US |
| OpenAI (GPT-4o) | Structured enrichment from Azure output | US |
| Cloudflare R2 | Object storage for original uploaded files | US |
| Railway Postgres | Primary application database | US |
| Vercel | Frontend hosting and edge delivery | US |
| Valkey / Redis | In-memory cache and job queue (no invoice content) | US |
| Stripe | Payment processing | US |
| Resend | Transactional email delivery | US |
| Mailgun | Additional transactional email delivery | US |
| Sentry | Error tracking and performance monitoring | US |
| PostHog | Product analytics and session replay | US |
Authentication providers
Optional third-party sign-in. These providers authenticate your identity only — they never receive invoice content, extracted data, or account data beyond the email address they return to us.
| Provider | Role |
|---|---|
| Optional "Sign in with Google" — authenticates identity and returns a verified email. Receives no invoice or account data. | |
| Microsoft | Optional "Sign in with Microsoft" — authenticates identity and returns a verified email. Receives no invoice or account data. |
All infrastructure is US-hosted
Our primary database (Railway Postgres), object storage (Cloudflare R2), and extraction pipeline (Azure Document Intelligence and OpenAI) all operate in the United States. If you access the Service from the European Economic Area, the United Kingdom, Switzerland, or any other region outside the United States, your data will be transferred to, stored, and processed in the US in the ordinary course of providing the Service.
If you require a Data Processing Addendum to satisfy your own GDPR or contractual obligations, contact us at security@invoiceparserpro.com.
Where we are. Where we're going.
The controls described above are live in production today. The items below are on the roadmap but not yet in place. We will update this page when their status changes.
Questions about security?
We answer technical security questions directly. Email security@invoiceparserpro.com.
We aim to acknowledge security inquiries within one business day.
Last updated: April 2026