Security

Your receivables, locked down.

Who owes you what, and how late, is some of the most sensitive data a company holds. Here’s exactly how we protect it.

Every company walled off, twice
Your data is separated from every other company by row-level security in the database, and again by organisation scoping on every request in the application. Two independent locks.
Sign-in we never hold the keys to
Accounts are managed by Google Firebase Authentication, with Google sign-in or email and password. We never see or store passwords, and every request is verified.
People see only their slice
Built-in and custom roles, departments and a permissions matrix decide who can view, edit or approve. Collectors can be limited to the debtors they own.
A permanent audit trail
Who changed what, and when, across debtors, invoices, payments and settings. Write-offs and deletions are recorded too.
AI that doesn’t see personal data
During import, personal details are masked before an AI model suggests column matches. AI never contacts your customers.
Managed database, daily backups
Data lives in managed PostgreSQL with daily backups. Everything travels over encrypted HTTPS connections.
Logs without secrets
Application logs are structured and automatically strip sign-in tokens and personal details.
Email that proves it’s you
Reminders are sent from your own domain with SPF and DKIM, so customers (and spam filters) can trust them.

Have a security questionnaire?

We’re early, and we aren’t certified yet. We’ll answer your team’s questions directly and share how Creditouch is built.

Upload your receivables and see today’s call list in minutes. Free during early access.