Security

Encryption in transit

All traffic between your device and Raqimo is encrypted with HTTPS/TLS.

Authentication

Sign in with email or Google. Passwords must include upper- and lower-case letters, a number, and a symbol. Sessions use signed tokens.

Access control

Each business's data is isolated, and requests are checked against your session and your business. Uploaded receipts are stored privately and served through short-lived, signed links.

Where data is hosted

Data is hosted with Supabase in the European Union (Ireland · eu-west-1).

Secrets

Sensitive keys are kept on our servers only and are never shipped in the website or app.

Reporting a vulnerability

Found a security issue? Please email security@raqmio.com. Don't post it publicly — we'll acknowledge your report.