Trust starts with
clear answers.
Where your clients’ data lives. Who can see it. How you take it with you. Here is what is true today.
Where is my clients’ data stored?
- In a PostgreSQL database and file store run by Supabase, in its Singapore region. The app itself runs on Vercel. We plan to move both to Mumbai; this page will say so when it has happened, not before.
- Everything travels over HTTPS, and the database and files are encrypted at rest by Supabase.
- We never ask for or store your clients’ Income Tax or GST portal passwords. Portal status is something you record, not something we log in to fetch.
Who can see it?
- Only signed-in members of your firm. Every record of your practice carries your firm, and the database itself refuses to return another firm’s rows. It is enforced by row-level security, not by the screens hiding them.
- Two-step sign-in with an authenticator app is available to everyone, and an owner can require it for the whole firm. That too is enforced in the database: without the second step, a stolen password shows nothing.
- Links you send clients, document uploads, the client portal, an invoice’s pay page, carry a 256-bit random key and show only what that link is for. A pay link shows one invoice; it never shows GSTIN, PAN, bank details or other clients.
- Other companies that handle data for us: Supabase (database and files), Vercel (hosting), Resend (sending email), and OpenAI, only when you ask it to draft something: the notice you paste or upload, or the client details a draft email needs. Never your whole client list.
What happens if I leave?
- Your data is yours. A firm owner can download everything at any time from Account security: every client, deadline, invoice, receipt and record as CSV, plus every document you or your clients uploaded, in one zip.
- No lock-in, no export fee, no request to raise.
Can you prove what my staff did?
- The owner has an activity log: who signed in, who exported, who downloaded a client’s document, and who removed or cancelled a client, an invoice, a receipt or a team member.
- Nobody, the owner included, and not us through the app, can edit or delete an entry. Audit files keep the same kind of append-only trail for each item’s preparation and review.
- Any member can sign out of every device at once, and an owner can set the app to sign people out after a period of inactivity on shared office computers.
What we have not done yet
We have not yet had an independent security test (a VAPT) by an outside firm. When we do, the result will be summarised here. Until then we test the parts anyone can reach without signing in, client upload links and the client portal, with an automated suite of attacks against them.