Built for data you would not want to lose
Invoices, bank statements and supplier agreements are sensitive. Here is how BeQuitt keeps them safe, in plain words.
Each company kept apart
Row-level security on every table. One company can never read another's rows.
Two-factor for what matters
When it is on, approving, sending, paying and signing need a second factor.
Encrypted credentials
Mailbox, WhatsApp and bank credentials are encrypted with AES-256-GCM.
Links stored as hashes
Email and invite links are stored as hashes, never in plain text.
An audit log that cannot be edited
Every action is written to an append-only, hash-chained log.
Hardened web app
Strict content security policy, HSTS and no framing by other sites.
Signed webhooks
Payment and inbound mail events are checked for a valid signature.
No tracking
No analytics, ads or third-party trackers in the app.
Your data, your call
Owners can export or delete their data.
Sub-processors
BeQuitt uses these providers to run the service:
- Supabase (database and storage)
- Cloudflare (network and email routing)
- Anthropic (AI reading of documents)
- Stripe (card payments)
- Google (Gmail connection)
- Microsoft (Outlook connection)
- Meta (WhatsApp)
These are the controls in the product today. BeQuitt does not claim a security certification.
See what you are owed and what you overpaid
Create an account, bring in a month of invoices and see the first findings the same day.