Security
Security at ininvoice: how we protect your company's invoices
ininvoice stores each company's invoices, purchase orders and delivery notes on servers in the European Union, in Frankfurt (Germany), encrypted in transit and at rest, and separated from every other organisation. This page summarises those measures and what we do not have today.
| Measure | Status |
|---|---|
| Database and documents in the EU (Frankfurt, Germany) | Yes |
| Encryption in transit (TLS) and at rest (AES-256) | Yes |
| Data access restricted per organisation | Yes |
| Individual credentials and signed sessions | Yes |
| Connected mailbox never modified or deleted | Yes |
| History of every invoice, exportable to Excel | Yes |
| GDPR and data processing agreement (DPA) available | Yes |
| Security certifications (ISO 27001, SOC 2, ENS) | We have none |
Separation between companies
Access to data is restricted per organisation : an organisation's data is only accessible to the people who belong to it.
People and decisions
Each person signs in with individual credentials and sessions are signed. Decisions on each invoice — approve, reject or ask the supplier for clarification — are taken from the dashboard and recorded with who, when and what changed. No invoice approves itself.
Want to see it with your own invoices? Request a demo with your own invoices
Mailbox access
When a company connects its mailbox, ininvoice reads e-mails with attachments that may be invoices, orders or delivery notes. It does not modify or delete e-mails, and access can be revoked at any time.
Data protection (GDPR)
ininvoice processes personal data in invoices as your company's processor; a data processing agreement is available at hola@ininvoice.com. Rights, retention periods and the list of sub-processors are in the privacy policy. For group-level fit, see invoices across several companies and AP for large companies.
Frequently asked questions
Where are my invoices stored?
The database and documents are stored on servers in the European Union, in Frankfurt (Germany). Some processors are based outside the EU; those transfers rely on standard contractual clauses and are listed in the privacy policy.
Do you have ISO 27001 or SOC 2?
No. ininvoice has no security certification today. If your procurement process requires one, tell us on the first call and we will send the technical information you need for your assessment.
Want to see it with your own invoices? Request a demo with your own invoices