Is our data safe?

The short answer for lenders and anyone holding customer KYC: your data stays in India, only the people you allow can see it, it is backed up every night, and you can take it out or erase it whenever you want.

Where your data is

• Your data is stored in India, on Amazon Web Services in the Mumbai region (ap-south-1).
• Visitors reach the service only over HTTPS through Cloudflare. The server has no open web ports, and its firewall allows nothing else in.

Who can see what

• Each workspace's data is kept apart: every request is checked against the workspace of the person signed in.
• Roles decide who sees and edits what, down to individual fields (for example, hide a PAN or bank account number from most of the team). Members can be limited to their own records, their team's, or all.
• Sign in with a password (stored only as a bcrypt hash, never in plain text) or with Google, Microsoft or your company's single sign-on. Repeated sign-in attempts are slowed down.
• Every record keeps a timeline of what changed, when and by whom.

Backups

• Both databases and all attached files are backed up every night, checked to be readable, and kept for 14 days.
• An encrypted copy (AES-256) of each backup is kept off the server for 30 days, so losing the server does not lose your data.
• We test restoring a backup into a separate database regularly: a backup that has never been restored is not proven.

Your data stays yours

• Export everything at any time: records as CSV, and a full export of a workspace or of one person's data (records, files and history) under Settings → Privacy & data.
• Erase a person's data when they ask, or a whole workspace when you leave. Erased data disappears from backups as they age out.
• We never sell your data or use it for advertising.

India's Digital Personal Data Protection Act (DPDP)

• For the personal data of your own customers, you decide and we process it only on your instructions; the export and erase tools let you answer access and erasure requests yourself.
• We have a grievance officer (see our privacy policy), acknowledge complaints within 24 hours and resolve them within 15 days.

How we run the servers

• Server access is by SSH key only, from approved addresses; repeated failed logins are blocked.
• Security updates install automatically. Passwords, keys and tokens are kept out of the code, and the keys for connected mailboxes and calendars are encrypted in the database.
• We are alerted to errors and failed backups as they happen.

Questions, or a security review?

We are happy to fill in your vendor or due-diligence questionnaire. Write to [email protected]. To report a security problem, use the same address; we reply within one working day.