Security
Your ledgers, customers and payroll deserve serious protection.
The platform connects to your most sensitive business systems. Access is controlled, activity is logged, data is encrypted — and we're straightforward about what we do and don't claim.
Practices
How security works in practice
Who can see what
- Roles define access by module, branch, company and data type.
- Sensitive fields — salaries, margins, bank details — can be restricted to named roles.
- Owners and admins can add, change or remove users at any time.
What gets recorded
- Logins, approvals, edits and exports are logged with user and timestamp.
- Automated actions are logged the same way as human ones.
- Audit logs are available to authorised administrators.
How data is protected
- Encryption in transit (TLS) and at rest.
- Each customer's data is logically isolated.
- Regular automated backups with tested restore procedures.
How integrations are handled
- Connectors request only the access they need.
- Writes into accounting systems can be limited to drafts for review.
- You can revoke a connection at any time.
Your data, your control
- Your business data can be exported in standard formats.
- Data handling on exit is agreed in your contract.
- We don't sell or share your business data.
Security
Your business data, handled with the seriousness it deserves.
Built with enterprise-grade security principles. Your ledgers, customers and payroll are the most sensitive data you have — access to them is controlled, logged and encrypted.
We don't display certification badges we haven't earned. Ask us for our current security documentation during evaluation.
Role-based access
Each person sees only what their role needs — by department, branch and data type.
Audit trails
Who viewed, changed or approved what, and when.
Encryption
Data encrypted in transit (TLS) and at rest.
Backups
Regular automated backups with tested restore procedures.
Data segregation
Each customer's data is logically isolated from every other customer's.
Granular permissions
Restrict sensitive fields — salaries, margins, bank details — to named roles.
Access controls
Strong authentication, session management and admin controls over users.
Least-privilege connections
Connectors to Tally, your ERP or CRM request only the access they need — and can be revoked by you.
FAQ
Security questions
Do you have SOC 2 or ISO 27001 certification?
We don't claim certifications we haven't achieved. We'll share our current security documentation and practices during evaluation, and will update this page as formal certifications are obtained.
Where is data hosted?
Hosting region and provider details are shared during evaluation and documented in your agreement.
Can our IT team or CA review your security practices?
Yes. We're happy to walk your IT team, auditor or CA through how access, logging and data protection work.
Find out where your business is losing time and money.
We'll map your current systems, identify manual bottlenecks and show what can be automated.
Free, no obligation. 45–60 minutes with someone who understands Tally, GST and how MSMEs actually run. Prefer WhatsApp? Message us.