Is my invoice data secure?
Your client list and invoice line items are confidential business records. Here is how OutVoicy protects them on Google Cloud.
OutVoicy stores invoices, clients, and branding in Cloud SQL on Google Cloud Platform, with encryption at rest and encrypted connections from our API. Each workspace is isolated by organization so another customer cannot query your data.
You sign in with a passwordless magic link—no password database to steal. Sessions use HttpOnly cookies; logging out revokes them server-side. Premium PDF and email actions run through a signed server proxy so API keys never ship in the browser.
Daily automated backups support recovery. In Settings you can download a full copy of your data, or delete your account to erase invoices and clients while we retain only contact and billing records required for legal and tax obligations.
When you use optional features, content may briefly leave GCP. This post is our published subprocessor list:
- Google Cloud Platform — https://cloud.google.com/
- Stripe — https://stripe.com/
- Brevo — https://www.brevo.com/
- Mailgun — https://www.mailgun.com/
- pdf.co — https://pdf.co/
- Google Gemini — https://ai.google.dev/
- Perplexity — https://www.perplexity.ai/
- ElevenLabs — https://elevenlabs.io/
- Cloud SQL encryption at rest and TLS in transit
- Per-organization isolation for every invoice and client
- Magic-link auth with HttpOnly cookies and logout revocation
- Download or erase business data from Settings anytime