Security & data protection

Your account, clients, invoices and files are stored on managed cloud infrastructure with encryption at rest. Data is hosted with our cloud database provider and is never sold or shared with advertisers.

Every connection to Navrio is served over HTTPS with TLS encryption, so data moving between your device and our servers cannot be read in transit.

Passwords are hashed and never stored in plain text. You can also sign in with Google, which delegates authentication to Google's own security systems. Password rules require a mix of letters, numbers and a special character.

Row-level access rules in the database mean each user can only read and modify their own clients, invoices and projects. Other users — and the public — cannot see your business data. Public invoice links use long random tokens that cannot be guessed or listed.

Invoices and reminders are sent from our verified domain (notify.navrio.online) with proper authentication, so your clients can tell genuine Navrio emails from fakes.

The database is backed up automatically by our cloud provider. If you ever want your data removed, email us and we will delete your account and associated data.