Invozo GST Invoicing & Compliance
🛡️ Google Play Security Verified 🔒 TLS 1.3 & AES-256 Encrypted

Security Architecture & Safeguards

In-depth technical overview of our defense-in-depth security model, hardware biometric segregation, screen protection, and responsible vulnerability reporting.

Application: Invozo
Publisher: Pansoftech
Infrastructure: Google Cloud & Firebase
🛡️
Architecture

End-to-End Security Architecture

Financial records and merchant tax ledgers require uncompromising protection. Invozo is engineered with multiple concentric rings of defense:

🔐 Encryption in Transit

All network communications between the mobile client and Google Firebase servers are enforced via modern HTTPS and TLS 1.3 cryptographic protocols with HSTS preloading.

🗄️ Encryption at Rest

Cloud Firestore data volumes and backup snapshots are encrypted by default using Google Cloud's FIPS 140-2 validated AES-256 cryptographic standards.

🏢 Multi-Tenant Firestore Rules

Strict server-enforced security rules isolate data partitions so that merchants can only access collections matching their verified businessId and OAuth token.

📱 Local Hardware Keystore

Authentication tokens and local app lock preferences are stored in the Android hardware-backed Keystore system using flutter_secure_storage.

👁️
Client Security

Hardware Biometric Segregation & Screen Shield

Biometric Protection (USE_BIOMETRIC)

The optional Fingerprint and Face Unlock security layers utilize Android's official BiometricPrompt API. Biometric verification occurs strictly within the device's physical Trusted Execution Environment (TEE). Invozo has zero visibility into biometric images or mathematical templates; our code receives only a binary cryptographically signed pass/fail signal from the OS.

Hardware Screen Privacy (FLAG_SECURE)

When Screen Privacy is activated, Android WindowManager applies FLAG_SECURE to the app view. This directly commands the mobile GPU and display compositor to block third-party screenshot apps, prevent screen recording, and obscure the application thumbnail in the Android multitask switcher.

🐛
Vulnerability Program

Responsible Vulnerability Disclosure

We welcome collaboration with cybersecurity researchers and ethical developers. If you identify a security vulnerability in Invozo or our hosted infrastructure:

  • Email our security team directly at pansoftech@gmail.com with the subject "Vulnerability Disclosure - Invozo".
  • Provide reproducible proof-of-concept steps and allow us reasonable time (minimum 30 days) to remediate the vulnerability before public disclosure.
  • Refrain from accessing, corrupting, or modifying data belonging to actual merchants.