secure invoice extraction