I am concerned as it is a requirement enforced by GDPR for secure management of personal information sent by e-mail.  We currently manage this efficiently as a business by password protecting or encrypting e-mails/attachments, however this is not the case when sending invoices and statements via Kashflow and therefore feel that this should be a top priority implementation for Kashflow to undertake otherwise upon our next external compliance audit we may be enforced to rethink our processes which may mean change our accounting software.   

I agree, this was going to be one of my suggestions.