Security overview
Financial Data & Client Records
Invoice Mitra stores invoice totals, payment statuses, and reference notes for your bookkeeping. Bank account and UPI details configured in your profile are strictly protected and rendered only on your authorized invoice documents.
Authentication & Supabase
Accounts leverage Supabase Auth with modern session handling. Row Level Security policies isolate tenant data at the database tier, dramatically shrinking blast radius compared to ad-hoc SQL in monolithic servers.
Transport & encryption
Public endpoints require HTTPS in production. Sensitive operations remain server-side via Nitro routes so secrets never ship to browsers.
Backups & availability
Supabase-managed Postgres includes automated backups on paid tiers. Pair this with exports you trigger from the product for offline archives. Status visibility will graduate to a dedicated status page soon.