Security

Invoicing built with careful data protection

Invoices hold bank details, addresses and financial figures. Here is exactly what Next Invoice protects and how, including what stays readable and what encryption cannot do.

Create a free account See pricing

Encrypted (AES-256-GCM)

Invoice contents
Client details
Bank and business details
Custom templates

Readable, so lists can sort

Invoice number
Dates
Status
Total

What is stored encrypted, and what is not.

What is encrypted

These are encrypted with AES-256-GCM before they are stored, using a key that stays on the server:

Invoice contents

The details of what you charged and for what.

Client details

Names, addresses and contact details.

Bank and business details

Your bank account details and business information.

Your custom templates

The templates you design in the builder.

What stays readable, and why

The invoice number, dates, status and total are stored as readable values, so your lists can sort and filter quickly. We would rather say that plainly than imply that everything is hidden.

How access is protected

Account isolation

Each account can only reach its own data.

HTTPS everywhere

Everything is served over HTTPS.

Rate-limited sign-in

Sign-in attempts are rate-limited, new accounts need email confirmation, and password resets go by email.

Privacy first

No advertising cookies and no data brokers. Website analytics stay off unless you accept them.

What encryption does not do

Encryption at rest is one layer, not a force field. Next Invoice is a hosted service: your data is stored on our infrastructure, and there is no self-hosted version. No system can promise that nothing will ever go wrong, which is why we describe the specific protections instead of making absolute claims.

Encryption at rest helps with

A stolen copy of the database
Invoice contents, client details and bank details being readable in that copy

It does not help with

A weak or reused password, so use a strong, unique one
A PDF you email to the wrong person

Questions to ask any invoicing provider

01
How is data encrypted?
Is sensitive data encrypted at rest, and with what?
02
Where is the key?
Is it kept separate from the data, and away from the browser?
03
What stays readable?
What is stored unencrypted, and why?
04
Who can reach it?
Who can access my data, and how is that limited?

See it for yourself

The Free plan includes 5 invoices and 5 proposals a month and 1 business, with every template, the template builder and PDF download included. Premium, with unlimited invoices, proposals and businesses, is coming soon.