Security & Data

• Encrypted cloud database, region chosen close to India.
• PDFs stored in private storage, served via short-lived signed links.
• PDFs generated on our servers — not in your browser.

• Every record is scoped to your business.
• Row-level access control on every table.
• Admin credentials never reach the browser.

• Money is stored as integer minor units (e.g. paise). Never floats.
• Finalized invoices are immutable snapshots; we store the generated PDF.
• Idempotent payment and invoice creation to prevent double-submit.

• Email + password sign-in with secure session cookies.
• HttpOnly, secure cookies for the web app.

• TLS in transit.
• Encryption at rest from the cloud provider.
• Field-level encryption for sensitive bank details (planned v0.2).

• Daily automated backups with point-in-time recovery.
• Restore drill before opening paid plans publicly.

Email hello@mavoin.com with a short description. We respond within 48 hours during launch and within 24 hours once paid plans are live.