Security Infrastructure

PostgreSQL + RLS

InvQ leverages Supabase's enterprise-grade Row-Level Security (RLS). This means your data is logically siloed at the database level. No other user, and not even our core engineers, can access your specific business records without your active session token.

Hardware Secure Enclave

Locally on your device, sensitive session data and encryption keys are stored using the device's Hardware Secure Enclave (Keychain on iOS and Keystore on Android). This ensures your credentials never leave the secure hardware layer of your phone.

Audit Shield 🛡️

Our real-time audit shield performs continuous ITC (Input Tax Credit) validation. We flag high-risk transactions before they hit your GSTR filing, reducing the risk of tax notices by up to 94%.

On-Device Encryption

All diagnostic logs are encrypted with AES-256 directly on your device before transmission. Furthermore, all Personally Identifiable Information (PII) like emails, names, and transaction amounts are automatically redacted and masked at the source.

Biometric Integrity

The InvQ mobile application supports hardware-level biometric locks (Face ID, Touch ID, or Android Biometrics). This adds a critical layer of "On-Device" security to prevent unauthorized access even if your phone is unlocked.

Enterprise AI Security

We use Enterprise-grade AI (Google Gemini) for receipt scanning. Documents are processed transiently and are NOT used to train models. Your data remains private and is never exposed to the public model history.