Home on The Clean Desk

Your Invoices Are Full of Sensitive Data. Here's How They Actually Leak

Sat, 22 Aug 2026 18:42:29 -0500

Most advice about working from home focuses on your network or your laptop. Almost nobody talks about the paperwork, the invoices, contracts, and payment details you send back and forth with clients every week. That stuff is often more exposed than your Wi-Fi ever will be, and the fixes are simple.

Think about what’s actually in a typical invoice: your client’s name, address, sometimes their tax ID, your bank details, maybe a partial account number. A contract might include home addresses, rates, or personal contact info for people who never agreed to have that floating around. None of this needs a hacker to go wrong. It usually leaks through ordinary habits.

About

Mon, 01 Jan 0001 00:00:00 +0000

The Clean Desk is for people who work from home and handle things worth protecting (client files, invoices, contracts, payment details) without having an IT department behind them.

Most security advice is written either for enterprises with a security team or for people who already know what a threat model is. If you’re a freelancer, a remote employee, or running a small business from a spare room, neither one helps much.

Affiliate Disclosure

Mon, 01 Jan 0001 00:00:00 +0000

Some links on this site are affiliate links. If you click one and sign up for a paid plan, we may earn a commission. You never pay more because of it. The price is the same as going direct.

What this does not change

Affiliate relationships do not determine what gets recommended, how products are ranked, or what we say about their weaknesses. We recommend free and open-source tools that pay us nothing whenever they’re the better answer, and we say so when a paid product isn’t worth it.

Contact

Mon, 01 Jan 0001 00:00:00 +0000

Email: hello@thecleandesk.org

Corrections

If something on this site is wrong, please say so, especially a technical or security claim. Corrections get made and noted rather than quietly edited out.

What we don’t do

We don’t accept guest posts, paid placements, sponsored reviews, or link insertions. Please don’t ask.

Privacy Policy

Mon, 01 Jan 0001 00:00:00 +0000

Short version: this site doesn’t track you.

What we don’t do

No analytics. No Google Analytics, no Plausible, no Fathom.
No tracking cookies. The site sets no cookies at all.
No third-party scripts. No ad networks, no social widgets, no embedded trackers. No fonts loaded from external servers.
No email list, and no accounts to create.

Running a site about privacy while surveilling the people reading it would be indefensible, so we don’t.