Security
Your data is your data
Security is not an afterthought at Reimbilly — it is the foundation everything else is built on. Here is exactly how we protect your financial data.
End-to-end encryption
Chat messages are encrypted on your device using NaCl box (libsodium) before transmission. We store only ciphertext — your plaintext never touches our servers.
Data encryption at rest & in transit
All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Database backups are encrypted with a separate key hierarchy.
Zero-trust row-level security
Every database query is gated by Row Level Security (RLS) policies in PostgreSQL. Users can only access rows they own or are explicitly granted access to.
SOC 2 ready infrastructure
We run on Supabase (hosted in ap-south-1) with automated backups, point-in-time recovery, and infrastructure audited by Supabase's SOC 2 Type II compliance.
DPDP Act 2023 & GDPR compliant
We comply with India's Digital Personal Data Protection Act 2023. A named Grievance Officer handles data requests. Users can export or delete all personal data at any time.
Data residency
Default data storage is in Asia Pacific (Mumbai). Enterprise customers can request EU or US residency. We do not sell or share your data with third parties for advertising.
Responsible disclosure
We take security reports seriously. If you discover a vulnerability, please report it privately before public disclosure. We commit to acknowledging your report within 24 hours and resolving critical issues within 72 hours.
Free to start. No card required.
Stop chasing receipts.
Start getting paid back.
Save hours every month on expense management. Open the web app and start scanning receipts — free, forever.
iOS · Android · Windows · macOS · Linux · Web