Security
Secure vendor payment file software, explained plainly
A payment file contains your vendors' bank account numbers and the amounts you are about to send. Here is how Zefty protects that data, what it never holds, and what you can do on your side.
Vendor banking data encrypted at rest
Your vendors' account, transit and institution numbers are encrypted in storage. A copy of the data on its own does not expose anyone's bank details.
Secure authorization with Zoho Books
Zefty never asks for, sees or stores your Zoho password. You approve the connection from your Zoho account, and you can revoke it there at any time; Zefty loses access immediately.
Billing handled by Stripe
Your subscription is paid on Stripe's secure checkout, and card details never touch Zefty. Invoices and card changes are handled from your billing page.
Two-factor authentication
Every user can add an authenticator app to their login, so a password alone is not enough to sign in. It is the single most effective step you can take to protect your account.
Secure managed cloud hosting
Zefty runs on secure managed cloud hosting with automated backups and always-on HTTPS. All traffic between your browser, Zefty, Zoho Books and Stripe is encrypted in transit.
Access limited to your organization
Users see only the organizations they belong to. Removing a user from an organization cuts their access to its bills, vendors and files right away.
Practices we follow and recommend
- Zefty asks Zoho Books only for what it needs: to read your bills, vendors and banking details, and to record payments. It cannot edit or delete your bills or contacts.
- Zefty never moves money and never holds your bank credentials. You upload each file through your bank's own portal, so approval and release stay with your signing officers.
- Every new account confirms its email address before use, and sign-in with Google, Facebook or Apple is available if your organization prefers managed identities.
- Test mode lets you validate your setup with files that are clearly marked as tests and record nothing in Zoho Books, so no accounting entry exists before you are ready.
- Every file is kept with a readable report and a payment history linked to Zoho Books, giving you a complete audit trail without exporting anything else.
- Our team looks at your organization only to resolve a request you have opened, never to browse your payment data.
- We recommend two-factor authentication for every user, a personal login for each person rather than a shared one, and removing users the day they leave.
- Questions about data handling, retention or a security review for your bank or auditor can be sent to [email protected]; we answer in English or French.
Security questions
The vendor name and the banking details needed to pay them, encrypted at rest. Zefty does not store vendor addresses, tax numbers or the documents attached to bills in Zoho Books. It reads only what it takes to produce and trace payments.
Neither. You authorize the Zoho Books connection from your Zoho account, and your password stays with Zoho. Zefty has no connection to your bank at all: you upload the file yourself through your bank's portal, and your bank credentials are never entered in Zefty.
Access is limited to the small team that operates the service, and they use it to run the platform and to resolve requests you open. If you need details for a vendor security questionnaire, write to [email protected].
Card details are entered on Stripe's secure checkout and never touch Zefty. Zefty keeps only a billing reference and the status of your subscription. Invoices and card changes are handled from your billing page.
Your access continues until the end of the paid period, and you can download every file and report until then. After that, your organization is closed and can be removed on request. The payments Zefty recorded in Zoho Books stay in Zoho Books, since they are part of your accounting records.
Email [email protected] with what you observed. If it concerns a possible vulnerability, include the steps to reproduce it; we acknowledge every report and keep you informed while we look into it. Please do not test against other customers' organizations.
Payment files without the spreadsheet risk
Encrypted banking data, secure authorization with Zoho Books, Stripe checkout and two-factor authentication, on every plan. Start with a test file today.