Security Statement

Last updated: July 7, 2026

At Islandbridge Automation Limited, we understand that as an accounting platform, the security of your financial data is paramount. We are an early-stage company committed to building a secure foundation from day one. This statement outlines the technical and organizational measures we take to protect your data.

Data Encryption

• Encryption at Rest: All user data and uploaded documents are encrypted at rest using industry-standard AES-256 encryption via our database provider, Supabase.
• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS/SSL).

Infrastructure & Hosting

• Cloud Providers: Our infrastructure is hosted on Vercel and Supabase. Both are industry leaders in reliability and security.
• Data Residency: We prioritize EU data residency. Our database is hosted in AWS regions located in the European Union (Ireland/Germany) where possible to comply with GDPR requirements.

Access Control

• Authentication: We use secure, token-based authentication. We do not store passwords in plain text.
• Internal Access: Access to customer data by Islandbridge Automation employees is strictly limited to authorized personnel who require it for support or engineering purposes.

Third-Party Integrations (Xero)

We integrate with Xero using OAuth 2.0 — we never see or store your Xero username or password. Xero API tokens are stored in Supabase Vault, encrypted at rest, and can only be accessed by secure backend functions when required for syncing.

AI Data Processing

Document extraction is powered by the Google Gemini API. We use Google's paid API services, which means your financial documents and extracted data are not used to train Google's publicly available AI models.

Data Integrity

We perform regular backups of our database to ensure that your data is safe in the event of a system failure.

No Sale of Data

We are a paid SaaS product. Our business model is based on subscriptions, not selling user data. We do not sell your personal or financial data to advertisers or third parties.

Reporting Issues

If you believe you have found a security vulnerability in Accruate, please report it to us immediately at haksing@islandbridge.io.