BILL is designed with your privacy and security in mind, providing various levels of controls in the following categories to help guard your money and sensitive information.
BILL helps protect against unauthorized access to your account by:
Enforce separation of duties with role-based access that lets you control who can enter, approve, and pay bills.
Automatically keep a record of all AP activity with a timestamped audit trail that cannot be altered, including original bills, review notes, approvals, payments, and remittance details for each transaction; then easily access that documentation for internal, vendor, and auditor inquiries.
Reduce risks from check theft by paying vendors with digital payments or checks that are sent by BILL on your behalf, rather than keeping blank check stock on your premises and exposing your bank information on checks you send.
BILL applies Positive Pay to reduce the risk of check fraud; the bank matches the check issued with the check presented for payment.
Keep your bank account information private from vendors by making digital payments through the BILL account.
BILL uses security software, intrusion detection and prevention appliances, and network monitoring technology to detect and prevent unauthorized electronic access to our servers.
BILL applies an additional level of encryption to protect access to sensitive customer data from malicious applications.
We use Transport Layer Security (TLS) and industry standard cipher suites to protect customer data during transit over the internet.
BILL replicates production data from the primary site to the co-location facility for disaster recovery scenarios.
BILL servers and network infrastructure are hosted at secure data center facilities managed by leading certified data center providers.
All our employees undergo background checks and data security and privacy training.
We have a formal vendor management program to manage third-party risks.
Compliance Protections
BILL undergoes an annual SOC 1 and SOC 2 Type II Audit by a leading national CPA Firm.
BILL partners with a PCI certified vendor for credit card payments.
We have adopted an Anti-Money Laundering (AML)/Office of Foreign Assets Control (OFAC) Program, which is designed to prevent the BILL Service from being used for purposes of money laundering, terrorist financing, violating or subverting OFAC sanctions, or for other illegal purposes.
We take security seriously at BILL and are deeply appreciative of the role that security researchers play in improving the security posture of our product and platform.
We partner with HackerOne to facilitate responsible disclosure of any security issues impacting BILL services. If you believe you have discovered a security vulnerability that you would like to report, please submit using this form.