This page only describes what is true today. What we don't have yet is in the last section; there are no "coming soon" claims here. If any of this stops being true, this page changes with it.
Who we are
S.I.S. (Super Invoicing System) is run by Madvengers Production, Malaysian business registration 003357155-P. A real business with a phone number: 018-252 6873.
Where your data lives
Everything (clients, invoices, payments, uploaded receipts) is stored in Supabase's Singapore region (ap-southeast-1). The site runs on Vercel's Singapore edge. We don't sell your data and we don't hand it to anyone for marketing.
The site is on a .app domain, so browsers force an encrypted connection. There is no unencrypted way in.
Who can reach it
Each studio's data is isolated at the database level with row-level security: once signed in you can only read your own studio's rows. That wall is inside the database, not hidden in the interface. The exception is people you invite yourself.
On our side there is a single super-admin account (the operator). It can enter your studio as you when you ask for help or when we investigate a fault. We don't do it without a reason, the feature exists to fix your problems.
Backups and recovery
The whole database is exported automatically four times a day (2am, noon, 5pm and 10pm Malaysian time), invoicing happens during working hours, so we don't wait for midnight. The nightly copy is kept for 90 days, the daytime ones for 14.
Backups are stored separately from the live database, so your data survives even if the Supabase project is lost entirely.
Payments
Subscription payments are handled by Stripe. Your card number never passes through our system and we never store it.
The AI features
Reading invoices and receipts is done by Anthropic (Claude). Under its commercial terms, what we send is not used to train models. You can also put your own Claude key in your company profile so the AI runs on your own account.
Third parties we use
Vercel (hosting) · Supabase (database and file storage, Singapore) · Stripe (payments) · Anthropic (AI extraction) · Google (optional: backing your invoices up to your own Google Drive, after you connect it). We update this page when the list changes.
Your data is yours
Reports export to CSV (opens in Excel) any time, and invoices download as PDF. Leave whenever you want and take your data with you. For a full export or deletion, just write to us.
If something goes wrong
Under Malaysia's PDPA (including the 2024 amendment), if a breach occurs that is likely to cause significant harm, we notify the Commissioner within 72 hours of becoming aware and tell the affected users.
What we don't have yet (honestly)
We are not ISO 27001 or SOC 2 certified and we have not had a third-party penetration test. Those cost real money, and we'll do them when a customer genuinely needs them. We are also not yet connected to LHDN's e-Invoice (MyInvois). We won't claim what we haven't built.
Contact
Security questions, data exports, or a vulnerability you found: madvengerszz@gmail.com or WhatsApp 018-252 6873. If you find a hole, tell us first and give us time to fix it, we'll thank you properly.
Last updated: 2026-09-12