Your data is yours. We look after it.
Organisations that handle public money and sensitive records need to know exactly how their data is kept. These are the commitments we make to every client.
Separate data store for each client
Each client's data is kept in its own separate, access-controlled store. One client's data is never mixed with another's.
Never shared or sold
Client data is used only to provide the service to that client. We do not share it with third parties, and we never sell it.
Every action logged
Every entry, edit, approval and login is recorded in an audit trail — who did what, and when. Approved entries cannot be quietly changed.
Role-based access
Staff, approving officers and administrators each see and do only what their role allows. Maker-checker control separates entry from approval.
Export at any time
You can export all of your data at any time, in standard formats, without asking us.
Data handover on request
If you stop using our service, we hand over your complete data on request, and then remove it from our systems as agreed with you.
Hosting location stated per client
We state where each client's data is hosted, according to the client's requirement. Hosting in Indian data centres is available on request.
Encrypted in transit
All our sites and applications are served only over HTTPS, so information moving between your browser and our systems is encrypted.
Security is shared
Good software is only half of it. We help each client put simple, sensible practices in place:
- Keep PINs and passwords personal — never share them
- Remove access promptly when someone is posted out
- Use handing / taking-over so responsibility is always clear
- Review the audit trail periodically
Documented per client
Hosting location, access arrangements, data retention and handover are recorded in each client's agreement, so there is no ambiguity.
If you have a specific security requirement or a questionnaire from your authorities, send it to us and we will respond in writing.
Ask a security question