Encryption
All communication between your browser and our servers is encrypted. Stored data is protected by encryption at rest. No password is ever kept in plain text.
Security
Five concrete commitments, observable in the product itself. No jargon, no infrastructure details that don't help anyone — only what matters to you and your accountant.
All communication between your browser and our servers is encrypted. Stored data is protected by encryption at rest. No password is ever kept in plain text.
Sign-in by signed, expirable, revocable token. Automatic lockout after repeated failed attempts. You can invite your accountant or a teammate in read-only mode from the Team page.
Every sensitive action (issuing, editing, voiding, payment, FEC access) is time-stamped and tracked. You can see who did what and when — no blind spots.
Your accounting records are retained for 10 years (Moroccan legal requirement). Nothing issued can be modified retroactively. You can export all your data at any time (CSV, PDF, official FEC).
Under Law 09-08 on personal-data protection, you may at any time access your data, correct it, export it, or request account deletion. A simple email to [email protected] is enough.
Responsible disclosure
Write to us before going public. We acknowledge in writing and fix as fast as we can.
[email protected] →