TRUST & SECURITY

Keeping your work protected

Kotiya is built using authenticated accounts, a hosted database and private document storage. We are preparing additional independent checks before a wider beta.

What you can do

Keep your login credentials private. Only share invoice and expense links with intended recipients. Shared links can be forwarded by someone who receives them and should be revoked when no longer needed.

What we are reviewing before beta

Account access controls, workspace separation, receipt permissions, share-link expiry and revocation, error monitoring, backups and recovery procedures.

This is pre-beta security information, not a certification, guarantee or claim that independent security testing is complete.

Report any suspected security issue through Contact. Do not send passwords or sensitive documents in an initial message.