1. Security overview

• Encryption of data in transit and at rest.
• Access controls and least-privilege access.
• End-to-end audit trails across the bill lifecycle (capture → extraction → validation → approval → payment → allocation), traceable to the acting user and time.
• Human-in-the-loop review options for AI-supported extraction and validation.
• Optional data residency to support local requirements.

2. Compliance & certifications

We build to recognised security and privacy practices and design our controls with enterprise and government procurement requirements in mind. Certifications and audit reports (such as SOC 2, ISO 27001, and PCI-DSS considerations relevant to payment processing) are part of our roadmap; current status, reports and questionnaires are available on request for prospective and existing customers under NDA. Contact info@billportal.io.

3. Incident response & breach notification

We maintain an incident-response process and monitor for security events. In the event of a security incident affecting your data, we will notify affected customers promptly and in accordance with applicable law and the timeframes set out in our Data Processing Agreement (Section 9).

4. Responsible disclosure

If you believe you have found a security vulnerability, please contact info@billportal.io so we can investigate and respond.

Safe harbour: we will not pursue or support legal action against security researchers who, in good faith, test and report vulnerabilities in accordance with this policy — provided they avoid privacy violations, service disruption and data destruction, do not access or exfiltrate more data than necessary to demonstrate the issue, and give us a reasonable opportunity to remediate before disclosure. Good-faith research conducted under this section is not a violation of our Acceptable Use Policy.

5. Availability

Availability targets and remedies for time-sensitive processing are described in our Service Level Agreement. Warranties are provided on a commercially reasonable-efforts basis as set out in the Terms of Service.

6. Trademark & attribution notice

BillPortal is a trademark of BillPortal Technologies Inc.. All other product names, logos and brands referenced on this website are the property of their respective owners, and reference to them does not imply endorsement or affiliation.

Third-party names are referenced only to describe live or supported integrations and interoperability. Where a named system is not a live integration, it is illustrative or on our roadmap and is identified as such. We confirm integration availability on a "where supported" basis; that availability statement is separate from, and does not expand, any trademark rights.

ENERGY STAR® is a registered certification mark administered by the U.S. Environmental Protection Agency (EPA) and is used in accordance with the EPA's ENERGY STAR identity/usage guidelines; our use does not imply EPA endorsement. Any reference to other named platforms (for example ERP, accounting or sustainability-reporting tools) is subject to confirmation that the integration is live; unconfirmed references will be removed or moved to a clearly labelled roadmap list.