How we protect your data
Pavr runs on Heroku and Amazon Web Services in the United States. Traffic is encrypted in
transit. Data is encrypted at rest, and link tokens, accounting connections and tax IDs
are encrypted again inside the app.
Everyone signs in with a one-time code sent to their email. There are no passwords to
steal. Each account's data is walled off from every other account, and what a person can
see depends on their role. Changes to records are logged.
Pavr staff reach an account only to help you, and each visit is logged. Card numbers never
touch our servers; Stripe holds them.
For the rest, see the Privacy Policy and the
Data Processing Agreement.
Report a problem
If you find a security issue, email security@pavr.io. We read
every report. Please give us a chance to fix the problem before you share it, and don't
read, change or keep other people's data to prove it.