Security and privacy
Security is part of the design, not an add-on
Our products hold patient records, family finances and identity documents. These are the practices every product follows.
Protecting data
- Encrypted connections (HTTPS) everywhere
- Sensitive files and keys encrypted at rest
- Each customer’s data separated from every other
- Screens show only what a role needs, such as the last digits of ID numbers
Controlling access
- Roles and permissions per team member
- Short sessions, sign-out when idle, locked accounts after repeated wrong PINs
- Every important action and every look at a document recorded
- Emergency access with a reason, reviewed afterwards
Privacy by law
- India’s Digital Personal Data Protection Act, 2023: notice, consent, rights and grievance handling
- Parental consent for anyone under 18
- Data kept only as long as needed, then deleted
- Designed for GDPR, HIPAA and Gulf and Singapore privacy laws
Building safely
- Secret scanning, code analysis and container scans on every release
- Automated tests, including browser tests and attack tests
- Monitoring, alerts and automatic rollback
- A written procedure for handling a data breach
Found a security problem?
Please tell us privately and we will respond quickly. Do not share customer data in your message.
Report it to us