HomeSecurity
Your business data, protected
Invoices, payslips and contracts are some of the most sensitive documents a business has. This is how Pilim keeps them safe.
Hosted in the European Union
Pilim runs on Amazon Web Services in Ireland (eu-west-1). Your databases, documents and backups are stored there.
Encrypted
All traffic to Pilim uses HTTPS. Databases and stored documents are encrypted at rest (AES-256).
Backed up
Databases are backed up automatically and can be restored to any moment of the last 7 days. Stored documents keep their earlier versions.
Each company kept apart
Every company has its own database schema, and every request is checked against the company of the person signed in.
Two-factor sign-in
Add a code from an authenticator app to your password, with recovery codes. You can also sign in with Google.
Roles for every person
Admins, accounting, HR, payroll, assets and employees each see what their role needs. Sensitive documents are only shown to the people allowed to read them.
Your accountant, on your terms
An accounting firm only gets access after a company admin accepts its invitation, and you can end that access at any time.
A trail of who did what
Pilim records who viewed, edited, shared or downloaded a document, keeps earlier versions when a file is replaced, and records every AI correction so it can be undone.
Legal originals kept intact
Peppol e-invoices you receive are kept exactly as received. Corrections are recorded beside them; the original is never changed.
How we run Pilim
Passwords and keys used by our services are kept in a secrets vault, not in code.
Our services only accept requests from signed-in users or from each other, and check the user's company on every call.
Service providers
These companies process data for us, each for one purpose.
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage, backups and e-mail | Ireland (EU) |
| OpenAI | Reading documents for the AI features | United States |
| Anthropic (Claude) | Reading purchases and correcting readings, depending on the plan | United States |
| Billit, Dokapi | Sending and receiving Peppol e-invoices | EU |
| Chift | Syncing with your accounting software | EU |
| Ponto (Isabel) | Bank feeds and payments, if you connect a bank | EU |
| Stripe, Mollie | Subscription and payment processing | EU / US |
| Sign-in with Google; website analytics, only with your consent | EU / US | |
| Firebase (Google) | Notifications in the mobile app | EU / US |
| HubSpot | Messages sent through our contact form | EU / US |
Report a security issue
Found a vulnerability? Write to support@pilim.net with the details. We look at every report and reply to you.