Security & Trust

At Numra, protecting customer information is an important part of how we build and operate our finance software.

Our security practices are informed by ISO 27001 principles, with technical and organisational measures to protect customer data and support the secure operation of our platform.

Security at a glance

Area	Our approach
Encryption	Data protected in transit and at rest
Access control	Authenticated access and appropriate permissions
Infrastructure	Cloud hosting with security controls
Data protection	GDPR-focused data processing practices
Monitoring	Operational monitoring and activity records
AI processing	Controlled processing within configured workflows
Security framework	Practices informed by ISO 27001 principles

How we protect your data

Encryption and infrastructure

Numra uses cloud infrastructure and encryption to protect customer information during transmission and storage.

Access to infrastructure and sensitive information is restricted according to operational requirements.

Authentication and access

Access to Numra is controlled through authentication and permissions.

We apply access controls intended to limit customer information and system functionality to authorised users and personnel.

Data handling

Numra processes information required to deliver customers' configured workflows, including financial records, documents and communications.

We use technical and organisational safeguards to protect that information and manage access to it.

Secure development and monitoring

Security considerations form part of how we develop, maintain and operate Numra.

We use monitoring and operational processes to identify issues, investigate incidents and maintain the security of our services.

Responsible AI

Numra uses AI to support finance workflows, including document processing, information extraction and validation.

AI processing operates within configured workflows, with business rules, permissions and human review where required.

We use third-party AI services to deliver certain capabilities, subject to applicable contractual and data protection arrangements.

Customers can also connect supported AI assistants through Numra MCP. When customers use external assistants, information shared with them is handled under the customer's agreement with that provider, and the provider's terms and data handling practices apply.

Third-party services and data protection

Numra uses selected third-party providers to support its infrastructure and services.

Where those providers process personal data on our behalf, we use appropriate contractual and organisational safeguards.

Information about relevant sub-processors is available to customers upon request.

Further information about how we process personal data is available in our Privacy Policy and Data Processing Agreement.

Security enquiries

For additional information about Numra's security and data protection practices, please contact our team.