The Details
That Matter.

Omono runs on Amazon Web Services in its Europe (Ireland) region. Core customer data and stored documents are held in this EU region.

The application runs across two physically separate AWS availability zones. The database maintains three live copies with automatic failover, and the cache also supports automatic failover.

Cloudflare provides network security in front of the application. Its network is global, so traffic can be processed outside the UK and EU on its way to Ireland.

Data travelling over public networks is encrypted using TLS 1.2 or higher. Customer data, documents and backups are also encrypted at rest. Passwords are stored as one-way hashes.

Stored files are private. Downloads use short-lived, signed links, and Omono checks that each file belongs to your organisation before providing access.

Requests are checked against the user’s organisation to keep customer data separate. Network protection also helps defend Omono against denial-of-service attacks.

Omono has Admin and Standard user roles. Admin users manage settings, the team and the Xero connection. Standard users work across the business modules without access to Settings.

• Two-factor authentication uses an authenticator app. An admin can make it mandatory for the whole team.
• Users receive an email if two-factor authentication is turned off on their account.
• Users are signed out after 30 minutes of inactivity. By default, a new sign-in ends their other sessions.
• Sign-in attempts are rate-limited to help protect against password guessing.

Activity notes on quotes, orders and purchase orders help the team follow changes. Task history and the Xero sync log provide further context.

Omono’s data is backed up automatically throughout the day. Backups are encrypted and stay in the EU.

Reports export to Excel and CSV. Tasks, workflow and customer price lists also support Excel and CSV exports; some chart reports can be downloaded as PNG images.

Business documents—including quotations, sales orders, proformas, invoices, delivery notes, purchase orders and credit notes—can be downloaded as PDFs. File attachments can be downloaded individually.

There is no single self-service export of everything in an account. If you leave, you can request a full copy of your data free of charge. Contact the Omono team to arrange the export. Read the Data Export Terms →

To arrange account closure or request deletion, contact the team by chat in the app or by email. Backup copies may remain until their retention periods expire; discuss your requirements with us before closing the account.

Omono is monitored 24 hours a day, with automatic alerts. Most updates are released without downtime.

We review code for security issues regularly and use automated security scanning. These are internal checks, rather than a claim of independent certification.