How access and file protection work
Understand who can see your information and how Moolamochi checks files and connected services.
Use verified accounts and narrow grants
Accounts use email verification, revocable sessions and optional TOTP multi-factor authentication with recovery codes. Workspace roles, project assignments and client grants constrain access. A payment link grants only its allowed document actions; platform support staff do not gain general tenant access.
Files stay private and are checked before use
The file flow places uploads in quarantine for type, size and malware checks. Unavailable or failed scans keep files non-downloadable. Private downloads recheck current access; revocation prevents new downloads but cannot recall bytes someone already saved. Issued invoice snapshots retain the branding and document data they were issued with.
Understand the limits
Connected services depend on your authorization and the provider’s availability. File checks and access controls reduce risk but cannot guarantee that every threat will be detected. We do not claim independent security certification or uninterrupted availability. Contact support if a connection or file remains unavailable.
Report a security concern privately
Use the support form to describe the affected feature and a safe way to contact you. Do not send passwords, API keys, payment card details or private document contents. Request a secure follow-up channel before sharing sensitive evidence.