🛡️ Security

How we protect your financial data

A plain description of the controls Reimber has in place today, and what is still on our roadmap. No badges we have not earned.

Start Free Trial Ask a Security Question

AES-256

Encryption of integration credentials

HTTPS

Encrypted traffic end to end

Built-in roles with granular permissions

SSO

SAML 2.0 & OpenID Connect

Infrastructure

Built on established cloud services

We rely on major cloud providers for the parts of the stack where they do the job better than we could.

🗝️

Azure Key Vault

Application secrets and certificates are stored in Microsoft Azure Key Vault, never in source code.

🗄️

Azure Blob Storage

Documents such as invoices and remittances are stored in Microsoft Azure Blob Storage.

📈

Error Monitoring

Application errors are tracked with Sentry. Passwords, tokens and API keys are scrubbed before any event leaves our servers.

Encryption

Encryption where it matters

Traffic is always encrypted, and the credentials that give access to your accounting system are encrypted before they are stored.

🔁

In Transit

All traffic between your browser, our API and third-party services is encrypted with HTTPS (TLS).

💾

Credentials at Rest

OAuth tokens for QuickBooks and NetSuite, SMTP passwords and SSO client secrets are encrypted with AES-256-GCM before they are stored.

🔐

Passwords

User passwords are hashed with Argon2, a modern password-hashing algorithm. We never store passwords in plain text.

Compliance

Where we stand today

We would rather tell you exactly where we are than show certification logos we do not have.

Privacy

Data export & deletion

Account owners can request an export of their data or its deletion, in line with GDPR and CCPA data-subject rights.

Audit

Activity logs

User activity and sign-in sessions are logged and available to administrators for review.

Roadmap

SOC 2

Reimber is not SOC 2 certified yet. If your vendor review requires a security questionnaire, we will complete it with you.

Data Protection

You control your data

We do not sell your data and we do not share it with anyone without your consent. AI features run on the Anthropic Claude API, whose commercial terms do not allow your data to be used to train its models.

Role-Based Access Control

Six built-in roles (Owner, Admin, AR Manager, Collector, Accountant and Read-only) plus custom roles, with permissions enforced on every API route.

Single Sign-On

Connect your identity provider through SAML 2.0 or OpenID Connect, and optionally require SSO for every user.

Multi-Tenant Isolation

Every record is scoped to your organization and company, so one customer can never read another customer’s data.

Least-Privilege Integrations

Connections to QuickBooks Online and NetSuite use OAuth, can be disconnected at any time, and have every sync recorded in a log.

Service providers we use

Microsoft Azure

Secrets & file storage

Anthropic

AI features

Paddle

Checkout, payments & taxes

Sentry

Error monitoring

Vercel

Website hosting

Have a security question?

Email your security questionnaire to support@reimber.com. We will answer every question in writing.

Start Free Trial Contact Us