Enterprise-Grade Security

Your Data, Encrypted & Protected

We take your data security seriously. Every piece of personal information in Rebill is encrypted with industry-leading encryption technology. Because your clients trust you with their details, and you should be able to trust us with yours.

AES-256 Encryption
POPIA Compliant
Per-Account Keys
Google Cloud Hosted

Multi-Layer Security Architecture

We do not just tick a box for security — we have built it into every layer of Rebill.

Field-Level Encryption

Every piece of sensitive data — names, emails, addresses, phone numbers — is encrypted individually before storage. Even if someone accessed our database, they would see only encrypted gibberish.

Per-Account Encryption Keys

Each business account has its own unique encryption key. Your data is completely isolated from other accounts, adding an extra layer of protection.

Envelope Encryption

We use industry-standard envelope encryption where data keys are themselves encrypted by master keys. This multi-layer approach is the same technique used by major banks and cloud providers.

Data at Rest Protection

All personal information is encrypted before it ever touches our database. Your client details, contact information, and business data are protected 24/7.

Privacy by Design

We follow privacy-by-design principles. Encryption is built into the core of our system, not added as an afterthought. Your data privacy is fundamental to how Rebill works.

Secure Cloud Infrastructure

Hosted on Google Cloud Platform with enterprise-grade security, automatic backups, and 99.9% uptime. Your data is stored in secure, certified data centers.

What Data Do We Encrypt?

All personally identifiable information (PII) is automatically encrypted before it is stored. You do not need to configure anything — security is built in from day one.

Client names and contact details
Email addresses and phone numbers
Billing and shipping addresses
Business information
Invoice and quote details
Payment integration credentials
All personally identifiable information (PII)
Encryption in Action
How your data is stored
You Enter
John Smith
We Store
AQIDBAUGBwgJCg...xNTY3ODkwYWJj

Even with database access, your data remains unreadable

Security Checklist

POPIA (Protection of Personal Information Act) compliant
Encryption at rest for all sensitive data
Secure key management with regular rotation capability
No plain-text storage of personal information
Data isolation between accounts
Hosted on enterprise-grade cloud infrastructure

Built for South African Compliance

The Protection of Personal Information Act (POPIA) requires businesses to implement appropriate security measures to protect personal data. Rebill's encryption system helps you meet these requirements automatically.

When you store client information in Rebill, you can be confident that you are taking appropriate technical measures to protect their data — something POPIA specifically requires.

Learn more about our POPIA compliance

Security FAQ

Common questions about how we protect your data

What data does Rebill encrypt?

We encrypt all personally identifiable information (PII) including client names, email addresses, phone numbers, physical addresses, and any sensitive business details. This encryption happens automatically — you do not need to configure anything.

How does field-level encryption work?

Instead of encrypting entire database tables, we encrypt individual fields containing sensitive data. This means even if an attacker gained database access, they would only see encrypted values. Each piece of data is encrypted with AES-256 encryption using unique keys per account.

Is Rebill POPIA compliant?

Yes, Rebill is designed with POPIA compliance in mind. We implement appropriate technical measures to protect personal information, including encryption at rest, access controls, and data isolation. Our encryption system ensures your client data meets the security requirements outlined in South African data protection law.

Can Rebill employees see my data?

No. Because we use field-level encryption with per-account keys, your sensitive data is encrypted in our database. Even our own team cannot read your client names, email addresses, or other personal information without the encryption keys, which are securely managed and not accessible to staff.

What happens to my data if I cancel my account?

You can request complete deletion of your account and all associated data at any time. When deleted, your encryption keys are destroyed, making any residual encrypted data permanently unreadable.

Secure Invoicing Starts Here

Join South African businesses who trust Rebill to keep their client data safe. Enterprise-grade security, free to start.

Create Your Free Account
Free forever plan No credit card required Cancel anytime