Security & your data

Your paperwork. Your books. Your data.

Invoices are commercially sensitive: they’re your prices, your suppliers, your margins. Here’s exactly how Meezly treats them. Written for owners and for the bookkeepers who ask the sharp questions.

Isolation is enforced in the database

Every table in Meezly carries row-level security: the database itself refuses to return data that doesn’t belong to your account. It isn’t an application-level filter that a bug could skip. It’s the storage layer saying no.

  • Row-level security on every table (account isolation at the database layer)
  • Invoice images and PDFs in private storage, never on public URLs
  • All traffic encrypted in transit (HTTPS); data encrypted at rest
  • Password-based sign-in with secure session handling

AI processing happens server-side, on our keys

Document reading runs on Meezly’s servers against Anthropic’s commercial API. Your documents never pass through your browser to a third party, API credentials never leave the server, and Anthropic’s API terms do not permit training on this data by default.

Xero, on your terms

The Xero connection uses Xero’s own OAuth consent, so Meezly never sees your Xero password. It writes draft bills, so your approval workflow in Xero remains the gate to your ledger. Revoke access at any time, from either side.

Straight answers

Security pages love vague reassurance; we’d rather be specific. If you or your accountant have a question this page doesn’t answer, ask us and you’ll get a direct answer from the people who built it.

Questions, answered

Who can see my invoices?

You. Access rules are enforced in the database itself (row-level security), so every query is scoped to your account. One operator can never see another's data. Documents live in private storage, not on public URLs.

Is my data used to train AI models?

No. Invoices are processed through Anthropic's commercial API, which does not use API data to train models by default. Your documents are read to extract your data, for you.

What access does Meezly have to my Xero account?

Only what you grant through Xero's standard OAuth consent, and Meezly creates draft bills. Your posting controls stay yours. You can revoke the connection at any time from Meezly or from Xero.

Can my bookkeeper have access?

Access is per-account login. Many operators share access with their bookkeeper. The same isolation rules apply to every session.

Ready when you are.

Upload your first invoice and watch it sort itself.