Security
Your tax data, protected at every step
Invoices, customers, payments: business software handles a company’s most sensitive data. Here is what we actually do to protect it.
Access
- Passwords hashed with Argon2Passwords are never stored in plain text: we keep only a hash computed with Argon2, the algorithm recommended for this purpose.
- Protected sessionsThe session cookie is invisible to page scripts and is never sent by other websites, so nobody can act on your behalf.
- Encrypted connectionAll traffic between your device and Nanus goes over HTTPS.
Team members
- Roles and permissions by areaInvite the people you work with and choose what they can see and edit: documents, purchasing, inventory, accounting, settings.
- Separate companiesEach company has its own data; anyone who manages more than one opens them with the same account, without mixing them up.
- Revocable API keysIntegrations connect with dedicated keys you can revoke at any time; webhooks are signed.
Data
- Encrypted credentialsEmail and PEC passwords you save in Nanus are encrypted with AES-256-GCM.
- Backup and restoreDownload a full copy of your data whenever you like and restore it in a few steps. On desktop, Nanus makes one every day and keeps the last 14.
- No lock-inExport invoices as XML and contacts and items as CSV at any time, even if you stop using Nanus.
Compliance
- Official tax rulesThe format and checks follow the FatturaPA specifications and the list of SDI checks published by the Italian Revenue Agency and Sogei.
- Regulatory updatesAn automated check of official sources flags any changes, so the rules stay current.
- GDPRFor your customers’ data, Nanus acts as a data processor under an agreement compliant with Article 28 of the Regulation.
Found a vulnerability? Write to us at info@nanus.it: we respond to every report.
Issue your first invoice with Nanus today
The Free plan never expires and needs no credit card. As your business grows, you move up a plan without changing software.