Your Financial Data. Our Obsession.
You are trusting us with your ledger, every invoice and bill that built it, and the GST and audit trail that depends on both. That is not data we treat casually — here is exactly how we keep it safe.
Dedicated Database Per Business
Your data is never mixed with other businesses. Ever. Each business account gets its own isolated PostgreSQL database on our cloud data platform, completely separate from every other customer.
Even if another business is on the same plan, your tables, your ledgers, your invoices live in a database that no other customer can touch.
256-bit SSL Encryption
All data encrypted in transit via TLS 1.3 and at rest via AES-256 on the database layer. Every API call, every page load, every file transfer is encrypted end to end.
We enforce HTTPS-only cookies and HSTS headers. There is no way to access QwikBills over an unencrypted connection.
Continuous Automatic Backups
Every change to your data is captured continuously, with point-in-time recovery. Nothing to schedule, nothing to remember.
Powered by our cloud data platform's continuous backup system, so recovery isn't limited to last night's snapshot. We can restore your database to a specific moment within the recovery window.
Razorpay for Payments
We never see, store, or process your payment details. All transactions are handled by Razorpay, India's most trusted payment gateway, PCI DSS Level 1 certified.
Your card numbers, UPI IDs, and bank details never touch our servers. Razorpay handles tokenisation, 3D Secure, and fraud detection.
Granular Access Controls
You decide who sees what. 150 granular permissions across every voucher, register and report, from "can view invoices" to "can approve GRN". Define roles, assign them to team members, sleep easy.
The salesperson sees only sales. The accountant sees only ledgers. The owner sees everything. No exceptions, no workarounds.
Authentication That Means Business
JWT-based authentication with single-session enforcement. If someone logs in from another device, your previous session is terminated instantly.
Passwords are hashed with bcrypt (12 salt rounds). Email verification via OTP. Password reset tokens are SHA-256 hashed with 1-hour expiry. No plaintext, ever.
Indian Data Protection Compliant
We follow the Digital Personal Data Protection Act (DPDPA) 2023 principles. Your invoices, attachments and documents are stored in India, and your data is governed by Indian law.
We collect only what is necessary, retain only what is required, and delete on request. No selling data to third parties. No ads inside QwikBills.
Zero Employee Access to Your Data
Our team cannot browse your invoices, ledgers, or financial data. Database access is restricted to automated systems only. No human has a password to your tenant database.
Administrative operations (migrations, monitoring) run against system metadata, never against your business data. Audit logs track every administrative action.
Our Commitment
We will never sell your data. We will never show you ads inside QwikBills. We share it only with the providers that run the service, under contract. Your financial data exists for one purpose: to help you run your business.
The QwikBills Team, Octet Logic