FocalHQ security and data protectionStraight answers about how your data is handled.
No security theater. This is what FocalHQ actually does today.
Access
Sign in with Google — there is no extra password for your team to manage. People join a workspace by invitation from an admin, and access can be removed the same way.
Roles
Owner, Admin and Member. Admin-only actions stay admin-only, so a member cannot change company settings or invite people.
Isolation
One login can hold several companies. Data is scoped per company, and switching companies changes everything you see — records never cross between them.
Hosting
Built on Google Cloud: Firebase Auth for identity, managed Postgres for data, encrypted storage for files, hosted in the EU.
Documents and files
Invoices, generated PDFs and receipt attachments are stored encrypted, and are only reachable by people in the company that owns them.
ANAF e-invoicing connection
The ANAF SPV connection is made once with OAuth. It is tied to the person who made it, and FocalHQ uses it only to upload the invoices you mark for e-invoicing.