Your books stay yours, and every change is on the record.
Multi-tenant software means many businesses share one system. Here is exactly how Nummio keeps your business's data separate, tracked, and retained.
Your books are yours alone.
Every table that holds tenant data enforces Postgres row-level security keyed to your account. That's the database itself refusing a query that crosses into another business's books, not just a check in the application code.
Every change is written down.
An append-only audit log records who did what — sent an invoice, locked a period, overrode a category — with the before and after. Nothing in that log can be edited or deleted, by us or anyone else.
Receipts stay for seven years.
Every receipt you forward or upload is retained for seven years, matching standard recordkeeping requirements, so it's there if you or your accountant ever need to look back.
Data is encrypted in transit and at rest.
Connections to Nummio run over TLS. Your data at rest — the ledger, your files, your receipts — is encrypted by our storage and database providers.
Who else touches your data
A short list of the subprocessors Nummio relies on, and what each one does.
| Subprocessor | Purpose |
|---|---|
| Supabase | Database (Postgres) and file storage |
| Amazon Web Services | Receipt text extraction, and temporary storage for large receipts during that process |
| Anthropic | AI categorization of transactions |
| Inngest | Background job processing for receipts, invoices, and other async workflows |
| Postmark | Inbound receipt email and outbound notifications |
| Stripe | Invoice payments |
| Vercel | Web application hosting |