Security at Fliss Invoice

You trust us with your clients and your money flow. Here is how we look after both.

We never touch your money

Your clients pay straight into your UPI ID or bank account. Subscription payments to us go through Razorpay; card and bank details never reach our servers, and every payment is confirmed directly with Razorpay before a plan switches on.

2-step login

Protect your account with a code from Google Authenticator, Microsoft Authenticator or Authy, with one-time backup codes. Our own admin accounts are required to use it.

Locked doors

Passwords are stored as one-way hashes. Repeated wrong passwords lock the account for a while, common passwords are refused, and you can sign out of every other device in one click.

Your data, kept apart

Each business’s invoices, clients and items are kept separate and tested to make sure no one else can read them. Export your data to CSV whenever you like.

Private invoice links

Shared invoice links use long random codes that cannot be guessed, and stop working if an account is suspended.

Encrypted and backed up

Every connection uses HTTPS with strict security headers. The database is backed up every day.

Staff access is logged

A small number of Fliss staff can view account data only to give support, prevent abuse or fix problems. Every such view is recorded in an audit log.

Found a security problem? Write to info@flisstech.com and we will respond quickly. See also our privacy policy.