Security

• Data encrypted in transit using TLS.
• Data encrypted at rest using industry-standard algorithms (e.g., AES-256).
• Sensitive credentials and external connection secrets are encrypted before storage.

• Role-based access control (RBAC) within the platform.
• Principle of least privilege for internal administrative access.
• Support for strong authentication; multi-factor authentication where available.

The platform is multi-tenant by design with logical isolation between organisations. Customers may also configure their own database (where offered) for stronger data separation.

We build on reputable cloud infrastructure (e.g., AWS, Cloudflare) that maintains recognised certifications. Network controls, rate limiting, and anomaly detection help protect against abuse and attacks.

We perform regular backups and design for resilience and recovery. Durability mechanisms (such as write-ahead logging and snapshots in our infrastructure layer) support recovery from failures.

We maintain audit logs and monitoring to detect suspicious activity, support incident investigation, and improve reliability.

We appreciate responsible disclosure of security issues. Please report vulnerabilities to [email protected] with enough detail to reproduce. Do not access data that is not yours or disrupt the Service while testing. We will acknowledge reports and work to remediate confirmed issues promptly.

We maintain an incident-response process and will notify affected customers and authorities of security incidents as required by applicable law, including the DPDP Act and CERT-In directions where relevant.