Security is the product.

Per-tenant encryption keys

Every customer gets their own AES-256-GCM key (DEK), wrapped by a master KEK in our secrets vault. If one tenant's key were compromised, no other tenant would be exposed. We never see your PII unencrypted.

Row-level data isolation

Postgres RLS guarantees that every query is filtered by your organization_id at the database level. Even if our application had a bug, the database would refuse to return another tenant's row.

Encrypted PII fields

National IDs (Aadhaar/PAN, NI number), bank account and passport numbers are stored as AES-256-GCM ciphertext. Display fields show only last-4 / masked. Every decryption writes to an immutable audit log.

DPDP & GDPR ready

Explicit consent records, right-to-access, right-to-erasure, data export — all built in. We're a Data Processor; you're the Fiduciary. Standard contractual clauses available.

Full audit trail

Every login, role change, PII access, and admin action is logged. Tenant admins can review the audit log; we provide regulatory exports on request.

Regional data residency

Customer data is hosted in-region — ap-south-1 (Mumbai) for India and eu-west-2 (London) for the UK. AI inference runs in-region via Anthropic on AWS Bedrock. Your data stays in your region.