How Recora keeps your books safe

Hosted in Australia

Recora runs in Amazon Web Services’ Sydney region. Your data does not leave Australia for storage.

Encrypted everywhere

All traffic uses HTTPS. The database, file storage and backups are encrypted at rest with keys held in AWS Key Management Service. Tokens for your connected apps are encrypted a second time inside the database, so even a database export would not expose them.

No passwords to steal

You sign in with a code emailed to you, a passkey (Face ID or Touch ID), or your Google, Apple or Xero account. Recora never stores a password.

Each venue is walled off

The database enforces that a request for one venue can only ever see that venue’s rows, at the database level, not just in the application. Staff see only what their role allows, and a role change takes effect immediately.

Fraud controls on bills

A bill that arrives by email asking you to pay a new bank account, or a sender pretending to be a known supplier, is held for your approval and never posted automatically.

Least access

Recora reads only what it needs from each platform. For an email inbox it looks at sender, subject and attachment names, never message text. Connections can be revoked by you at any time, from Recora or from the platform.

Protected edges

A web application firewall sits in front of the app and blocks common attacks and abusive traffic. Uploads are size-limited and checked by type.

Watched

Every write to your books is logged with who did it and why, visible to you in Activity. Alarms page the team if the nightly close fails, errors spike or the database is under strain.

Backed up

The database is backed up continuously with 35 days of point-in-time recovery, and documents are versioned.

Tested

Over a thousand automated tests run before every release, including the venue-isolation and fraud-hold checks.

Your rights

Export everything, disconnect anything, delete your venue, from Settings.

Found a security issue?

Email security@recorabooks.com.au. We respond within two business days and will not take action against good-faith researchers.