Security and your data
CashRelay handles your invoices and your customers' details, so here is, in plain English, how it keeps them safe. And what hasn't been done yet.
Each company's data is walled off
Every company's invoices, customers and emails are kept apart by the database itself, not just by the app. The app runs with limited database rights, and automated tests check that one company can never see another's data.
Kept in London
The app and its database run in London, on Vercel and Neon. Everything travels over encrypted connections.
Nothing is emailed without you
By default every reminder waits for your approval, and you see exactly what will be sent. Each reminder is checked again just before it goes, and it is sent at most once. The demo can never send a real email.
Only real payments change a balance
An invoice is marked paid only when a payment is recorded, never because a customer or an AI says so. Payment notifications from other systems must carry a valid signature, or they are rejected.
Replies are checked before they count
A reply only affects an invoice if it comes from an email address held for that customer. Anything else is held for you to look at.
AI on a short lead
By default, replies are read by fixed rules. An optional AI reader can be switched on for trickier replies. When it is, the reply's text is sent to Anthropic to be read. Either way, fixed rules decide what happens next, and AI never changes a balance, offers a discount, changes bank details or makes threats.
A record of everything
Every reminder, reply, decision and payment is logged with who or what did it: a person, the rules, or an outside system. The app can add to this record but cannot edit or delete it.
Careful sign-in
Passwords are stored only as one-way scrypt hashes, never as readable text. Sign-in cookies are sent only over secure connections and can't be read by scripts on the page.
A demo that can't do harm
Every demo visitor gets their own fictional company, kept apart like any other. Demo companies cannot send real emails, and the number of demos is limited to stop abuse.
Not done yet
CashRelay is at the pilot stage, so we'd rather be clear about what isn't in place:
- No independent security test or certification yet.
- Sign-in doesn't have two-step verification yet.
- Old demo companies aren't deleted automatically yet. They only ever hold fictional data.
Questions
If you'd like to know more about how your data would be handled, just ask.