Security & Reliability.
Absolute, Uncompromising
SSL
The Billee.ca application - including your data - rests securely behind Cisco-powered firewalls.
All information travelling between your browser and Billee.ca is protected from eavesdroppers with 256-bit SSL encryption. The lock icon in your browser lets you verify that you aren't talking to a phishing site impersonating Billee.ca and that your data is secure in transit. Our servers have SSL Certificates signed by global leaders in certificates, Starfield Technologies Inc. (GoDaddy.com), so all data transferred between the users and the service is encrypted. The encryption is the same as that used for internet banking.
User Passwords
Users must choose a strong password and automatic lockouts are enforced when incorrect passwords are repeatedly entered. We don't allow the browser to save your login, which eliminates access from a stolen or compromised computer. If you leave your computer unattended for an extended period, you will be automatically logged out.
As you will note upon signing into Billee.ca, your last ten logins are displayed. They provide verification of the physical location & operating system and browser used. If you see any discrepancies, please contact Billee.ca immediately.
Redundant Servers and Datacentres
The Billee.ca infrastructure uses redundant storage and servers to keep the application and you rdata available in the case of hardware failure - and another set of servers and storage in a geographically separate datacentre in case our primary datacentre is made unavailable by a natural disaster or other disruption.
Managed Hosting
Billee.ca has chosen Rackspace for our hosting needs. With clients like General Electric, Hershey, Cisco, Pfizer, EMI Music, Scott's, Hilton, Sony Music, Columbia House and the US Marines, we know Rackspace provides the hardware, service and expertise you expect.
Backups
The data in your Billee.ca account is replicated across multiple database servers in two geographic locations to prevent a single failure from causing data loss. Additionally, that data is backed up nightly to tape and stored in a secure offsite location to ensure that, even in the event of a catastrophe like a tornado or flood, your information will be safe and your records can be quickly restored.
Our service has been designed for high user availability, with redundancy built into every level of our hosting infrastructure, including redundant power, network, database, and web servers. Our service availability performance stands at over 99.99% since launch in 2010.
All customer data is backed up daily. We also run a continuous off-site data back-up service into a second Rackspace facility for further real-time data protection.
Because we back-up your data, you don't need to. If you want to get your data out of Billee.ca at any time, then you can simply use the detailed General Ledger reports to export your data. Exporting reports to Excel is ideal because they can be easily read and are also in a form that can be manipulated for import into other systems if required.
You can also export other data such as your Payees, General Ledger journal entries, transaction history data from Billee.ca in a convenient .csv file format.
We go to great lengths to comply with legislation covering the security and privacy of data about you as an individual, and the financial data relating to your organization, in all the major countries where Billee.ca is available.
If you have any security concerns or questions, feel free to contact us at security@billee.ca.
Particularly sensitive information - credit card numbers, bank account information, and your payment gateway account details - are encrypted in our database using AES.
User Access
No one has access to your organization unless invited by you and with a level of user permission selected by you. You can remove any invited users whenever you want. You also have the option to invite Customer Care, but it's for support purposes only and completely at your discretion.
Vulnerability Scanning
Billee.ca's servers are scanned for vulnerabilities regularly by AlertLogic, our managed security provider. These scans test our servers both from the internet and from inside our network, and any newly-defined problems are addressed as quickly as possible.
Intrusion Detection
All of the traffic entering and leaving Billee.ca's network is monitored by an Intrusion Detection System (IDS). Any unusual behaviour is analyzed by AlertLogic's CISSP-certified security experts, and responses are coordinated between them, Rackspace, and our system administration team.
The Billee.ca servers are located in Rackspace's state-of-the-art datacentres, which provide biometric access controls, constant surveillance, redundant power feeds and generators, robust fire suppression, and carefully monitored climate control to protect the servers that store your data and manage your billing.
Our servers are located within Rackspace tier-4, enterprise grade hosting facilities. Access is restricted to authorized Rackspace staff by a combination of biometric systems and 24/7 onsite security guards, and is continually audited to meet SAS 70 Type II standards.
Firewalls & Network Security
External access to our servers is controlled by multiple layers of firewalls, intrusion protection systems and routers, which are configured and monitored according to industry best practices.
