Your ledger.
Your data. Your country.
You're handing us the most sensitive thing your business owns — the truth about money, customers and stock. Here is exactly how we hold it.
India-only data residency
Every byte of your ledger, customer list and inventory stays inside Indian borders. Hosted on AWS Mumbai and Hyderabad. We never replicate outside the country, even for backups.
Encryption at rest & in transit
TLS 1.3 in transit. AES-256 at rest, with envelope encryption for sensitive fields (PII, GST identifiers, ledger balances). Customer-managed keys for Enterprise on request.
Role-based access control
Owner, manager, accountant, warehouse, delivery — each role sees what they need, nothing more. Finance is invisible to the warehouse. Approvals require the owner. Period.
7-year audit log, tamper-evident
Every money, stock and customer-record change is signed and stored for the full statutory retention period. Every event shows who, what, when, from where — and we cannot edit it.
Daily backups, fast recovery
Encrypted snapshots every 24 hours, retained for 30 days. Tested restore drills monthly. Recovery point objective (RPO) under 4 hours, recovery time objective (RTO) under 8.
GST e-invoice, attested
IRN pulled directly from GSTN at the moment of dispatch. No intermediate caching of your invoice data. Filing-ready exports in JSON and Excel.
Two regions. Zero border crossings.
Primary in Mumbai. Hot standby in Hyderabad. Backups in both. Logs and analytics never leave India.
The frameworks we meet, work toward, or sidestep.
Every party that touches your data.
We publish this list whenever we change it. You're notified 30 days before any addition takes effect.
If something goes wrong, you hear from us first.
Every customer-affecting incident triggers a notification within 4 hours of detection. Detailed post-mortem with timeline, root cause and remediation within 5 working days. No spin.
Want the long version?
Our security architecture document goes deeper — key rotation cadence, threat model, network topology, the works. Sent over after a quick NDA for serious evaluators.