Hosting
Google Cloud, region us-central1 (United States).
Isolation
Each customer gets a dedicated, isolated environment: its own database, file storage, encryption key and service account. No customer data is shared between customers.
Encryption
- In transit: TLS 1.2 or higher everywhere, with HSTS.
- At rest: Google Cloud encryption for the database, files and backups.
- Sign-in tokens for QuickBooks, Gmail and Slack are also encrypted with a key unique to each customer, held in Google Secret Manager.
Access
- The dashboard is protected by Google sign-in through Google Identity-Aware Proxy. There are no passwords to leak.
- Two roles: Admin (setup and users) and User.
- Each environment's service account can reach only that environment's resources (least privilege).
Connections use OAuth
InvoiceBloom never sees or stores your QuickBooks, Google or Slack passwords.
- QuickBooks can be disconnected at any time from InvoiceBloom or from inside QuickBooks.
- Gmail access reads and labels messages in the connected mailbox and never deletes mail.
Human in the loop
- No bill is created in QuickBooks without a person's approval in Slack.
- Above an amount you set, two different approvers are required.
- Posted bills can be rolled back.
Fraud and error checks
- Duplicate invoices are detected.
- Changed supplier bank details are flagged; bank details are stored masked.
- Totals are checked.
- Text inside an invoice that tries to instruct the AI is flagged.
AI
- Invoices are read with Google Gemini on Google Cloud Vertex AI, inside Google Cloud.
- Customer data and QuickBooks data are not used to train AI models.
- No AI provider outside Google Cloud is used.
Audit log
Every action (reading, approval, posting, rollback, settings change) is written to an audit log that cannot be edited.
Secure development
- Every release passes a dependency vulnerability audit, static code analysis, a secret scan and a container image vulnerability scan.
- A release is blocked if any known high or critical vulnerability is found.
Data retention
- On cancellation, processing stops at once.
- The customer's environment (database, files, tokens, keys) is deleted within 30 days.
- Backups expire within 7 days after that.
- Customers can export their data from the dashboard first.
Incidents
Affected customers are notified without undue delay and within 72 hours.
Subprocessors
Google Cloud (hosting and AI). Slack, Intuit QuickBooks and Gmail are the customer's own services that the customer connects.
