Trust & Compliance

Data Security
& Encryption

An invoicing and accounting platform holds your most sensitive records. We treat that responsibility as sacred — encrypted, isolated and access-controlled at every layer.

How we protect you

Security engineered into every layer

Encrypted in transit

All traffic is protected with TLS (HTTPS) using strong, modern ciphers. Nothing leaves your screen in plain text.

Encrypted at rest

Your database and uploaded files are encrypted on disk with AES-256 — the standard trusted by banks and governments.

Complete isolation

Database-enforced row-level security means one business can never see, query or reach another's data — by design.

Role-based access

Owners control exactly what each team member can do, down to the branch and document type. Least privilege, always.

Credential protection

Passwords are one-way hashed, never stored in plain text. Sensitive secrets are additionally AES-256-GCM encrypted.

Resilient & recoverable

Hosted on redundant, high-availability cloud infrastructure with automated backup and disaster-recovery capabilities.

Built defensively, by default

  • Secure, invite-only accounts — public self sign-up is disabled
  • Every action authorised on the server against your identity, role and plan
  • Parameterised database queries — SQL-injection is eliminated by design
  • Secrets are never written to logs
  • You own your data: export anytime, deletion on request
  • We never sell your data or use your customers' information for marketing

Questions about how we protect your data?

haris@forgewick.com · WhatsApp 0333 1911824