Security

Your records, kept private and kept yours

Coffer holds sensitive information: what you earn, what you spend, what you owe. Here is how Coffer looks after it.

Coffer never touches your money

Coffer does not hold, move, or take a cut of your money. It reads the balances you record and does the maths; your bank still holds everything, and always will.

Private to your account

Your records are yours alone. Coffer keeps every account's data separated at the database level, not just in the app, so one account can never see another's invoices, expenses, or figures.

Your records are stored in New Zealand

Coffer keeps your financial and tax records - invoices, clients, tax events, and expenses - in a database hosted in New Zealand. Receipt files you attach and the emails Coffer sends are handled in Australia; the privacy policy sets out exactly what sits where.

Sign-in you control

You sign in with your Google account or a one-time code sent to your email, so there is no password for Coffer to store or leak. The only person who can see your records is you, plus an accountant you deliberately invite.

Read-only for anyone you invite

When you invite an accountant, they get a read-only view: they can see and download your records, but never change them. You can revoke that access at any time.

Protected in transit

Every page and every request is served over a secure, encrypted (HTTPS) connection, enforced by your browser. Coffer also sends the browser hardening headers that guard against common web attacks.

Never sold or shared

Coffer does not sell your data or share it for advertising. It is used to run Coffer for you, and nothing else.

Yours to export or delete

You can export your data whenever you like, and you can ask for your account and everything in it to be permanently deleted. Your records stay yours to take with you.

Support access is logged

If anyone at Coffer ever needs to access an account to help with a problem, that access goes through an admin tool that records every action to an audit log. Nobody quietly reads your data.

Security is part of how Coffer is built

The code behind Coffer is reviewed for security issues as a routine part of building it, not as an afterthought, with a particular focus on keeping each account's data walled off from every other.

Found something? Tell Coffer

If you believe you have found a security issue, Coffer wants to hear about it. Email security@coffer.co.nz (or use the Contact link in the footer below), and please give it a chance to be fixed before sharing it more widely.

A tool you can trust with the numbers.

A calm invoicing and tax tool for contractors in New Zealand.

Try Coffer now