Security built into how AsanBill works

Security is a foundation, not an add-on

Every company on AsanBill handles real money, real customers, and documents that clear customs. We treat protecting that data as part of the product itself — not a page you visit once. The controls below are how the platform works day to day.

Isolated by company

AsanBill is multi-company by design. Each company you run is a separate tenant: its invoices, customers, items, and expenses belong to that company alone, and people only ever see the companies they have been added to. Switching between companies never mixes one client’s data with another’s.

Access on a need-to-know basis

Invite your team and give each person exactly the access their job needs through roles and permissions. An accountant, a salesperson, and an owner can each have a scope that fits their role, so sensitive actions stay with the people who are meant to perform them.

An audit trail you can rely on

AsanBill keeps an audit log of activity in each company, alongside logs of the emails and documents you have sent. When a figure is questioned or a document needs checking, you have a record of what changed — useful for your own controls and for resolving disputes with buyers.

Protected end to end

Underneath the day-to-day features, a few things are always on:

• Token-based authentication, with every API request authenticated and scoped to your account.

• Encryption in transit — all traffic runs over HTTPS/TLS.

• Regular backups, so your invoices and export documents can be restored.

• Managed cloud infrastructure with monitored availability.

These are the defaults for every plan, from Starter to Enterprise.

Compliance and reporting a concern

AsanBill is built on Laravel, a mature and widely used open-source framework, and follows modern security practices. We do not advertise formal certifications such as SOC 2 or ISO 27001; if your organisation needs documentation for a vendor or security review, get in touch and we will help. If you believe you have found a vulnerability, please report it to us responsibly so we can address it quickly.