Changed bank details
Your details are versioned; changing them needs a second approval, and the customer portal always shows the current ones from us rather than from a forwarded email.
CENTILIO BILL / MONEY · AURORA
Invoices are where small businesses get robbed.
Not usually by a break-in: by an email with changed bank details, a PDF forwarded to the wrong person, or a payment nobody recorded. This page is how Bill is designed to make those three things hard — and what we will and will not touch, starting with your money, which we never hold.
proposed approval controlsyour payment accountsecurity targets, not certificationsroles proposed from Account
Product design preview · Bill has not shipped. All features, screens and prices are proposals.
Bill has not shipped yet.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
Bill is not available yet. These are proposed screens, features and prices—not a beta, payment service or live invoicing product. All console actions affect fictional data in this page only.
We never hold your money
Designed around your own payment account.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
Money moves between your customer and your own Stripe account. Bill records what Stripe reports and reconciles it against the invoice. We never touch the funds, never hold a balance and never see a card number; if Centilio disappeared tomorrow, your Stripe account and its money would be unaffected.
UPI and Razorpay are planned after launch, on the same principle: the rail belongs to you, we record what it tells us.
Risks and proposed controls
And what is designed against each.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
The forwarded PDF
The portal link is the source of truth, is tied to the customer, and can be revoked; a PDF is a copy, not the record.
The payment nobody recorded
Stripe reports it, Bill matches it to the invoice, the reminder sequence stops itself, and the receipt goes out without anyone remembering to send it.
Roles
Who may send, who may only look, who may approve a credit note — from Account, not a second list of people.
Closed periods
Once a period is closed on Business, invoices in it cannot be edited, only credited, and every change is on the trail.
Audit
Every send, view, payment, credit and bank-detail change with who, when and from where; CSV on Business.
Standards
Platform controls proposed for Bill.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
Encrypted in transit and at rest on AWS and Google Cloud, inside your organisation's space; passkeys, MFA and device rules come from Account. Indian accounts will be able to ask for India residency on Enterprise. None of this is running yet — Bill is not built — and the page will be rewritten with what is actually true on the day it ships.
- ISO 27001-aligned controls · proposed, unverified
- GDPR · proposed, unverified
- DPDP Act 2023 · proposed, unverified
- AES-256 at rest · proposed, unverified
- TLS 1.2 · 1.3 · proposed, unverified
- PCI handled by Stripe · proposed, unverified
Questions
About money, data and fraud.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
Is online invoicing safe?
Proposed design, not an implemented control: The risk in invoicing is not usually the database; it is a payment redirected by an email nobody checked. Bill puts the payment details on the invoice and the portal, not in a forwarded PDF, changes to bank details need a second approval, and every send, view and payment is on the record.
Do you hold my money?
Proposed design, not an implemented control: No. Stripe moves money between your customer and your own Stripe account, and Bill records what Stripe reports. We never touch it, hold it, or see a card number.
Where does my data live?
Proposed design, not an implemented control: In your organisation's space, encrypted in transit (TLS 1.2 and 1.3) and at rest (AES-256), on AWS and Google Cloud; Indian accounts will be able to ask for India residency on Enterprise.
Who can see what a customer owes?
Proposed design, not an implemented control: Whoever the roles in Account allow, and nobody else. Your accountant can be given read-only access at no charge; a customer sees only their own portal.
What about invoice fraud?
Proposed design, not an implemented control: Bank details are versioned and a change requires approval; the customer portal always shows the current details from us rather than from an email; and every invoice PDF carries the same numbering as its record.
Can I lock a closed period?
Proposed design, not an implemented control: Yes, on Business: once a period is closed, invoices in it cannot be edited, only credited, and the change is on the audit trail.
Does Celia see my customers' data?
Proposed design, not an implemented control: Inside your organisation, to draft and to notice. It never trains on it, never sends anything by itself, and never changes an amount.
Next for you
What people add after Bill.
The tools Bill sits between. Check each product’s current stage while Bill is built.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
The proposed shared record connects these products as they launch. Follow each product page for its current stage.
Be told when Bill opens.
Design targets only: Bill has not been built or independently security-audited. The controls described here are proposals, not verified certifications or a claim of legal compliance.
Wave 2 is the next build after the currently available tools. Leave your name and you will hear before the announcement — and in the meantime the free invoice generator is yours.