Security and privacy, as built
What the software does to keep each business’s data apart, decide who sees what, and record every change. Only what the product does today.
Separation and access
A database per business
Each business works in its own isolated database; one business’s people cannot reach another’s records.
Rights per page, field and amount
Roles decide which pages a person opens, which fields they see (cost, margin, supplier prices) and up to what amount they may approve.
Audit trail
Every change is recorded with who, when and from what to what. Posted entries are corrected by new entries, never edited in place.
Signing in
Two-step sign-in
A code from an authenticator app on top of the password. The secret behind it is stored encrypted.
Company sign-in (SAML 2.0)
A business can send its people through its own identity provider; the app creates nobody on the way.
Passwords
10 to 128 characters, length over composition rules; a new password signs the person out everywhere.
Connections to other services
Credentials encrypted
API keys, secrets, passwords and tokens of stores, couriers, accounting apps and payment providers are encrypted before saving and never shown again.
Checked before saving
New credentials sign in first; refused credentials are not saved.
Changes logged, values never
Setting, changing or removing credentials is in the audit log, without the value itself.
Privacy tools for your customers’ data
For the data your business keeps about its customers and suppliers. How we handle data about you as our customer is in the privacy notice.
Export personal data
One machine-readable file with everything the business holds about a person, for access and portability requests.
Erase personal data
Anonymises the person; invoices, payments and journals stay, as accounting law requires. Refused while money is still open.
Retention you choose
Message content is cleared after 30 days to 2 years (13 months by default); there is no “keep for ever”.
Report a security problem
E-mail support@cashflowinventory.com with “Security” in the subject and what you found. Please don’t test against other people’s accounts or data.
Start with the free plan
Create a business in a few minutes. The free plan has no time limit and needs no card; move to a paid plan when you need more users, locations or orders.