How Billvito protects your records

On the way

Everything between your phone and our servers travels over HTTPS.

When stored

Private details are encrypted with a separate key for each business: your business's contact and bank details, your clients' phone numbers, email and street addresses, tax numbers and notes, the notes on entries and documents, the text of rough notes, and voice and photo files. Names of clients and items, amounts, dates and statuses aren't encrypted, so search, totals and reports can work.

What this doesn't do

This isn't end-to-end encryption. Our server can read your records when it needs to, for example to show them on your other phone or to work out a report. Keys are kept apart from the database, so a stolen database alone isn't enough, but they are on the same server today, so someone who broke into the whole server could reach them.

Who can see your records

• You, and anyone you add to your team
• Our staff manage accounts and check public pages, and have no screen for reading your invoices, clients or notes
• Staff can't sign in as you
• One business can't reach another's records, and tests check this

Your business page

Only what you choose to publish appears on it. Invoices, clients and balances have no way onto it. It runs no scripts, sets no cookies and is checked by a person before it goes public.

Signing in

You sign in with Google or a code sent to your email, so there is no password to steal or reuse. Your sign-in is kept on your phone, sealed by the phone's own secure storage.

Backups

We make a checked backup of the database and your stored files every day, and of the database before each update. Every night an encrypted copy goes to separate storage, away from our server. Keep your own copy of anything you can't afford to lose.

Leaving

You can have your account deleted at any time. Our privacy policy has the details.

Found a problem?

If you think you've found a security problem, please write to support@billvito.com.