Security Overview

Last updated: July 27, 2026

At myBilly, the security of your business data and your clients' information is our top priority. This page outlines the security measures and practices we employ to keep your data safe.

1. Infrastructure Security

Our application is hosted on modern, secure cloud infrastructure. We employ:

• Strict firewall rules to prevent unauthorized access to our servers.
• Regular security updates and patches for our operating systems and software dependencies.
• Isolated database environments that are inaccessible directly from the public internet.

2. Data Encryption

We ensure that your data is encrypted both in transit and at rest:

• In Transit: All communication between your browser and myBilly is encrypted using TLS (Transport Layer Security) via HTTPS.
• At Rest: Sensitive data, such as your user passwords, are strongly hashed using bcrypt or Argon2 before being stored in our database. We never store passwords in plain text.

3. Application Security

We follow secure coding practices to protect against common web vulnerabilities:

• Protection against Cross-Site Scripting (XSS) via strict output encoding.
• Protection against Cross-Site Request Forgery (CSRF) via secure tokens on all form submissions.
• Protection against SQL Injection via the use of parameterized database queries and modern ORMs.
• Strict rate limiting on authentication routes to prevent brute-force attacks.

4. Payment Security

myBilly does not directly store or process credit card information on our servers. All payment processing is handled by compliant, industry-leading payment processors (such as Stripe) which adhere to the strictest PCI-DSS compliance standards.

5. Reporting Security Issues

If you believe you have discovered a security vulnerability in myBilly, we ask that you report it to us immediately by emailing security@mybilly.io. We treat all security reports with the highest priority and will work with you to resolve the issue swiftly.