SECURITY
Security at Get Every Invoice Paid.
Your receivables data is sensitive. Here is, in plain language, how we protect it and what you control.
Encryption in transit
Every connection to Get Every Invoice Paid — the website, the app and the API — uses HTTPS, so data is encrypted between your browser and our servers.
Data storage
Your workspace data is stored in a managed relational database. Secrets for connected integrations, such as access tokens and webhook signing keys, are encrypted before they are stored and are never shown back in full in the app.
Tenant isolation
Every record belongs to exactly one organization, and every request is checked against the organization of the signed-in user. One business can never see or act on another business’s invoices, customers or reminders.
Payments
Subscription billing is handled by Stripe. Card data is handled by Stripe; we never store card numbers. Payment events from Stripe are verified using signed webhooks before they are trusted.
Audit logs
Every collection action is logged: reminders scheduled, sent, delivered, bounced or canceled; payments detected; sequences stopped; and changes to settings, templates and integrations. You can review this history from each invoice and from your workspace activity.
Safe sending
- Duplicate sends are prevented: each reminder stage is sent at most once per invoice.
- Reminders stop as soon as a payment is detected.
- Bounced addresses are flagged and suppressed, and recipients can opt out of reminders with a link in every email.
- Daily sending caps protect your sender reputation and your customers’ inboxes.
Account access
Each person on your team signs in with their own account, so changes to settings, templates and integrations are attributed to the person who made them. Owners can remove a member at any time, which ends their access to the workspace.
You stay in control
- Disconnect any integration at any time; syncing stops immediately.
- Export your data whenever you want.
- Delete your account or your entire organization from Settings.
Certifications
We don’t currently hold third-party security certifications. We’d rather tell you that plainly than imply otherwise. If your business has specific security requirements, email support@geteveryinvoicepaid.com and we’ll answer your questions directly.
Report a vulnerability
If you believe you’ve found a security issue, please email support@geteveryinvoicepaid.com with details. We’ll acknowledge your report, keep you updated, and won’t take action against good-faith research. See also our Privacy Policy.