Your books deserve bank-grade protection.
Encryption at every layer, two-factor authentication, audit logs, and one-click session revoke — all included on every plan, including free.
Defence in depth — eight layers, no plaintext anywhere
What's protecting you
Twelve concrete defences — each with a real mechanism, not just a buzzword.
Two-factor authentication (TOTP)
Google Authenticator / Authy compatible. Backup codes generated at enrolment and stored only as SHA-256 hashes — even a DB leak can't replay them. Admins can mandate 2FA for the Admin role via a single config flag.
AES-256-GCM column encryption
2FA secrets and national-ID fields encrypted with authenticated AES-256-GCM. The key sits in a separate config (file mount preferred over env var) — a leaked DB dump is useless without it.
Encrypted opaque IDs on the wire
Every record ID sent to the browser is encrypted with AES-ECB single-block + HMAC. No internal Guids ever leak, tampered tokens fail decryption, and the deterministic scheme keeps URLs stable across requests.
Passphrase-encrypted backups
Export your books as an .hbpenc file protected by your own passphrase (PBKDF2 / 200k rounds). Safe to email to your accountant or store on a USB. A weekly health-check endpoint verifies the export pipeline still works.
Refresh token rotation + theft detection
Every refresh rotates the token. If a revoked token is ever presented again, we burn the whole family — every device on that account is forced to log in fresh.
Email alert on new device login
First login from a new IP triggers an email with device + IP + time. If it wasn't you, one click takes you to the security dashboard to sign out everywhere.
Live security dashboard
See your platform's posture at a glance: 2FA adoption, active sessions, failed logins (24h / 7d / 30d), audit log of admin actions, and configuration checks.
Account lockout + per-user rate limits
Five wrong passwords in 15 minutes locks the account. Login endpoint is capped at 10/min/IP. Every authenticated user gets 120 writes / 600 reads per minute — runaway scripts and credential-stuffed sessions are throttled before they can do damage.
Tamper-resistant audit log
Every create / update / delete on a tracked entity logged with timestamp, user, IP, and changed columns. Sensitive fields (passwords, 2FA secrets, tokens, CNICs) are redacted in the log itself — even a stolen audit table doesn't leak credentials.
Error reports without your data
Sentry breadcrumbs scrubbed before upload — auth headers, cookies, API keys, and PII (name / email) stripped. Request bodies never captured. Operators see the bug, not your customers' financials.
Multi-tenant isolation
Every API call is filtered by company ID at the framework level. Queries hitting another company's data are rejected with 403 before they reach your service code — no "forgot to check" risk.
TLS + browser hardening
HTTPS to the browser (Let's Encrypt), TLS between app and database in production, HSTS / Content-Security-Policy / X-Frame-Options=DENY / nosniff / Permissions-Policy headers. No plaintext, no clickjacking, no third-party origin trust.
Built so the admin actually sees what's happening.
Most accounting software hides security under settings nobody opens. Hisab Book Pro surfaces it.
Live posture dashboard
Open Settings → Security. See 2FA adoption %, active sessions, failed-login pressure (24h / 7d / 30d), and configuration health (encryption key, JWT key, DB TLS, email transport) in one screen.
"Sign out everywhere" button
Suspect compromise? One click revokes every active session including the current one — no SQL needed, no support ticket.
Audit log viewer
Every create / update / delete on a tracked entity logged with timestamp, user, and changed columns. Browse it in the UI — no DB access required.
Boot-time self-audit
Every deploy logs OK/WARN per check (encryption key set? JWT strong? TLS enforced? encryption round-trips?) so misconfiguration is caught before anyone uses the app.
Security FAQ
Where is my data stored? +
On servers located in the EU region on hardware-encrypted disks. Cross-region replication is not enabled — your data does not leave the EU region.
Who can read my data? +
Only people with valid login credentials for your company. Inside Hisab Book Pro, queries are tenant-scoped — your data is filtered out of every other company's view at the database layer.
What happens if there's a database leak? +
Passwords are one-way hashed with BCrypt (un-reversible). 2FA secrets and cnics are AES-256-GCM encrypted with a key kept off-server — attackers see ciphertext only. Other columns would be plaintext, which is why we also enforce TLS, rate-limit, and lock accounts.
Do you have SOC 2 / ISO 27001? +
Not yet — formal certification is a multi-year process. We follow the technical controls those frameworks require (encryption, audit logs, access controls, key management) but haven't paid for an external auditor. Most Pakistani SMB customers don't need the paper trail.
Can I export my data and leave? +
Yes. Settings → Backup → 'Download Encrypted Backup' gives you a complete passphrase-protected file with every entity in your company — invoices, payments, journal entries, customers, vendors, products, ledger. No lock-in.
Who do I notify if I see suspicious activity? +
Click 'Sign out everywhere' on Settings → Security immediately to revoke all sessions, then email info@thesmartqafla.com with what you saw. We respond within 24 hours.
Try it for free. Security on day one.
Every feature above is on the free plan. Nothing locked behind an enterprise tier.
Create your free account