Trust & Security
Security & Data Protection at DocAvira
Your invoices, books and tax records are confidential. These are the controls built into DocAvira today to keep each business's data private and every change traceable.
Tenant-isolated data
Every business is a separate organization. Records are scoped to that organization, and one business cannot see another business's data.
Role-based access control
Team members are given roles such as Owner, Admin, Accountant, Staff or Viewer, so each person only gets the access their job needs.
Protected sign-in
Passwords are stored only as salted scrypt hashes, never in plain text. Password-reset links are single-use and expire, and sign-in attempts are rate-limited.
Encrypted integration credentials
Credentials for tax-portal and provider integrations are encrypted at rest with AES-256-GCM.
Private document storage
Uploaded documents are kept in private storage that is not publicly reachable. Downloads go through authenticated, time-limited signed links.
Audit logs and locked records
Changes to accounting, tax and document records are logged. Closed accounting periods and issued tax calculations are locked against editing.
Separate customer portal access
Customers you invite to the customer portal see only the invoices and documents you explicitly share with them, kept separate per business relationship.
This page describes safeguards that exist in the product today. It will be updated as new controls and certifications are added. DocAvira does not currently claim any third-party security certification.
Start with a free account
Free plan with no expiry and no credit card.