Security and boundaries
Security and controls
Finance automation is only useful if the boundaries are explicit. InvGress is designed to preserve approval, traceability, and tenant isolation while still reducing manual work.
Control default
Draft-only enforcement before posting
01
AES-256 at rest and TLS in transit
02
OAuth-based integrations only, no password storage
03
Tenant-isolated data model
04
Timestamped audit trail for each processing step
05
Customer invoice data is not used to train models
06
Role-based access controls
07
Hosted on isolated cloud infrastructure
08
Draft-only enforcement before posting
Draft-first. Review before you post.
Take control before anything posts to Xero.
InvGress gives your team a validated, audit-ready workflow — so nothing slips through without review.