Safety & Security Standards

At PayHisab, we understand that your business financial data and employee records are highly sensitive. We have engineered our application from the ground up to ensure your data remains secure, private, and always available to you.

1. Cloud Infrastructure & Encryption

PayHisab is built on Google's Enterprise Firebase Infrastructure.

• Data in Transit: All communication between your device and our servers is encrypted using industry-standard TLS (HTTPS), preventing interception of your data over public networks.
• Data at Rest: Your data stored in our cloud databases is automatically encrypted at rest using AES-256 encryption.

2. Authentication

We do not store or process passwords on our servers. All authentication is handled securely by specialized Identity Providers (Google and Apple). This eliminates the risk of password leaks from our database.

3. Local Device Security

For extra protection on shared or unlocked devices, PayHisab includes an integrated App Lock feature:

• Biometric Security: You can require Face ID or Touch ID to open the app.
• Custom PIN: A 4-digit localized PIN can be set to protect the app.

4. Data Isolation

Our database relies on strict Firestore Security Rules. These rules are enforced at the server level, ensuring that it is cryptographically impossible for another user to read, write, or access your business data without being authenticated as your specific user ID.

5. Offline Resilience

As a Progressive Web App (PWA) with native local caching, your data is securely cached on your device. This ensures you can access and manage your records even in low-connectivity areas, seamlessly syncing back to the cloud when a connection is restored.

---