Security
Your books, kept the way books should be kept.
Freddia holds invoices, payroll and tax records — the material a business cannot afford to lose or leak. Here is plainly how that is protected.
Encrypted in transit and at rest
Every connection runs over TLS, and your data is encrypted at rest by the platform it lives on. MRA EIS credentials get an additional layer: they are encrypted before they are ever written to the database, and decrypted only at the moment a submission is made.
Access scoped to the organisation
Every query is scoped to the organisation you are signed into. Users hold explicit roles, and a user in one set of books cannot read another — not by URL, not by API, not by accident.
An audit trail that cannot be quietly edited
Ledger entries are append-only in effect: corrections are recorded as corrections. Who changed what, and when, is retained so an auditor, an accountant or the bank can follow the history.
Your data stays exportable
Reports, ledgers and payroll history export to PDF and Excel at any time, on any plan, including after you cancel. Data lock-in is not a retention strategy we are interested in.
The practices
What is actually in place.
Freddia is a young product and we would rather describe what is true today than claim certifications we do not hold.
Authentication
Email and password with session-based auth, hashed credentials, and sign-out across devices.
Authorisation
Role-based access per organisation, enforced on the server for every read and write.
MRA EIS credentials
Encrypted at the application layer before storage; decrypted only in memory at submission time.
Payments
Handled by PayChangu. Freddia never sees or stores full card numbers.
Backups
Continuous managed backups of the production database with point-in-time recovery.
Infrastructure
Managed cloud hosting with isolated production credentials and no shared developer access to live data.
Found something? Tell us.
If you believe you have found a vulnerability, write to security@freddia.com with the details. We will acknowledge it, and we will not pursue anyone who reports a genuine issue in good faith.
Questions
Security, answered plainly.
In managed cloud infrastructure operated on Freddia's behalf, with encryption at rest and continuous backups. Your organisation's records are logically isolated and only reachable through authenticated, role-checked queries.
Ready when you are.
Start free and keep your books somewhere accountable.