Every company's data is kept apart.
Every client gets its own database, its own secret key and its own files. Every company runs on its own server. A sign-in for one company is refused by another, even for the same person.
Built to be trusted with your books.
You are handing over customers, prices and salaries. This is what we do about it, how each part is tested, and what is still to come.
Data stays in India.
Hosted in an Indian region. Built to support your duties under the DPDP Act: consent, requests, erasure, an incident log and a retention report.
Every change, kept.
Who did what and when, kept by the database itself. The books and the stock ledger are corrected only by a new entry, never rewritten.
Roles that mean it.
Checked on the server, not just hidden on screen. A test walks every record type, role, report and action.
Two-factor sign-in.
Authenticator codes, required for admin, accounts and HR. Lock-out after repeated tries. The phone app locks with your fingerprint, and a lost phone is signed out from the web.
Backups that were restored, and safe upgrades.
Encrypted daily backups with checksums, and a restore drill that proves the numbers match. Reviewed database changes, a backup before each one, and a rehearsal on a copy of your data.
Read-only AI.
Four locks between a question and your data, and a log of everything asked.
What is not done yet
No external penetration test yet. No hardware-key sign-in. Uploaded files are scanned for viruses only if a scanner is switched on. The privacy notice and the client agreement need a lawyer's review, and we will not sign a client before that is done.
Want the security walkthrough?
Twenty minutes. We follow one order from the first call to the last payment, on numbers like yours.
Book a demo