Your invoices are business-critical. We guard them that way.
Finvoice records the payment behaviour that reputations — and financing decisions — are built on. Protecting that data is our first job: bank-grade encryption, strict access controls and a complete audit trail.
Security built into every layer
From the connection in your browser to the records in our databases, the same standard applies.
Encryption in transit and at rest
All traffic is encrypted with TLS 1.2 or newer, and stored data — invoices, settlement records, account details — is encrypted at rest with AES-256.
Role-based access control
Give each team member exactly the access their job needs — issue invoices, approve settlements or view reports — and nothing more. Internally, we hold ourselves to the same least-privilege standard.
Complete audit trails
Every significant action — an invoice issued, acknowledged, settled or financed — is logged with who, what and when. Nothing disappears quietly.
Monitoring and uptime
Systems are monitored around the clock with automated alerting, regularly tested backups and a 99.9% availability target — because your invoicing can't wait for ours.
Your data, under Tanzanian law
Our privacy and data-handling practices are aligned with the Tanzania Personal Data Protection Act, 2022.
Purpose-bound processing
We collect and process business data only for the purposes you signed up for: invoicing, building your reputation, and financing you request.
Your rights, respected
You can access, correct and export your data at any time. Deletion requests are honoured in line with the Act, subject to legal record-keeping obligations.
Reputation shared on your terms
Your Trust Score powers financing arranged in the background. Nothing is shared for a financing decision unless you ask for financing.
Data residency, taken seriously
Tanzanian business data stays governed under Tanzanian law, and any cross-border processing follows the safeguards the Act requires.
Found a vulnerability?
We welcome reports from security researchers. Email us the details and steps to reproduce — we acknowledge reports within 48 hours, keep you informed while we fix, and never take legal action against good-faith research.
Report to security@finvoice.co.tzSecurity questions before you commit?
Talk to our team — or create a free account and inspect the controls yourself.