FileBizOnlineHow your filing is actually protected
Not a badge wall — the concrete mechanics behind how we handle your payment, your data, and your documents.
Payment never touches our servers
Checkout runs inside Stripe's embedded Checkout, rendered on our page but processed by Stripe end to end. Your card number is never sent to or stored on our infrastructure. We verify every payment webhook's signature before trusting it, and processing a given payment session is idempotent — it can't be double-applied even if Stripe retries a notification.
Access control enforced at the database
Your filings and account data are protected by row-level security policies in our Postgres database — rules that apply no matter what query runs, not just a check our application code remembers to perform. Application code adds a second layer on top, but the database itself is the backstop.
Documents live in a private vault
Supporting documents you upload go into a private storage bucket, capped at 10MB per file and limited to PDF, PNG, and JPEG. Nothing in that bucket is publicly reachable — viewing a document requires a signed link that expires shortly after it's issued, generated only for you or an authorized reviewer.
Your account email is always verified
The email tied to your account is always the one you signed up or signed in with — never a value someone could type into a filing form. That's what makes it possible to offer guest checkout without ever risking a paid filing landing on an account you can't access.
Public forms are rate-limited
Actions anyone on the internet can trigger — starting a filing, checking out — are rate-limited to make automated abuse impractical, without adding friction to a normal filing.
Least-privilege by default
Elevated, cross-account access (used only for admin review and support) is never inferred from client-editable data — it's read from a server-verified account role on every check, not trusted from anything the browser sends.
Report a security concern
If you believe you've found a vulnerability, email us directly at hello@filebizonline.com — we'll respond and take it seriously.