How Billman protects your billing
Least access
Connections ask for billing scopes only: plans, seats, usage and invoices. Billman can't deploy, delete or read your code.
Isolated workspaces
Every table is protected by row-level security. A workspace's data is only readable by its own signed-in members.
No stored card numbers
Billman keeps only your card's brand and last four digits. Full numbers are entered in the payment processor's secure form.
One card per vendor
Each tool charges its own virtual card, so a compromised vendor affects one card you can freeze instantly.
Confirmed sign-ups
New accounts confirm their email address before they can sign in or connect a tool.
Encrypted everywhere
TLS in transit and encryption at rest on managed Postgres. API keys live in the hosting provider's encrypted environment store.
Reporting a vulnerability
Email security@billman.app with the details and steps to reproduce. We reply within two business days and won't pursue good-faith research.