Our invoicing and billing for small business accounts is primarily done using Recurly (http://recurly.com), an online recurring business system.  Their Data Encryption methods, Web Application Security, and Physical and Network Security are well-defined at http://recurly.com/security.