Security & trust
Billabex secures billing data and client communications while clearly separating its own safeguards from the certifications held by its AWS hosting infrastructure.
Information updated April 1, 2026
Billabex does not currently hold ISO 27001 or SOC 2 certification. These certifications cover the AWS infrastructure used by the service; Billabex safeguards are documented separately below.
AWS infrastructure
Certification of AWS’s information security management system.
AWS infrastructure
AWS audit reports covering controls including security, availability, and confidentiality.
AWS infrastructure
AWS infrastructure compliance with security requirements for payment data.
Billabex safeguards
Data minimization, disclosure of AI use, traceability, and human oversight.
Billabex architecture on AWS
The core infrastructure processing debtor data is hosted in Ireland in the eu-west-1 region.
Billabex safeguard
Communications with the service are encrypted in transit using TLS 1.3.
Concrete safeguards explained without conflating Billabex controls with our hosting provider’s certifications.
Collection data entrusted to Billabex is processed on AWS infrastructure located in Ireland. Our public sub-processor list identifies the services used, data categories, locations, and applicable transfer mechanisms.
Data is protected while it is transmitted and while it is stored. We do not describe this as “end-to-end encryption,” which refers to a different protection model.
Every business request is associated with the relevant organization. This logical separation prevents one client from accessing another client’s data.
Billabex limits processing to information required for collection. Team access to production systems is protected by MFA, granted according to least privilege, and logged.
The asynchronous architecture allows reminders to resume after an interruption. Availability commitments depend on the applicable contract.
Verify our commitments, providers, and contractual framework without waiting for a sales demo.
Our team answers security, privacy, and compliance questions before you make a decision.