Trust Center
Your finance data, secured. Your AI, governed.
Security and compliance are built into everything we run, so your team can use AI and agents without giving up security, privacy or control.
- ISO/IEC 27001
- ISO/IEC 42001
- GDPR & DPDPA aligned
Compliance
Audited, not self-declared.
Two independent certifications, and privacy practices aligned to the laws you answer to.
ISO/IEC 27001
Our information security management system is certified and independently audited.
ISO/IEC 42001
How we build, deploy and monitor AI and agents is certified and independently audited.
GDPR and DPDPA
Personal data handled to EU and Indian law, with data kept in the region you require.
AI
You control the model layer.
Your data stays yours. Models only read what they need to answer.
Your model, your region
Azure AI Foundry, Amazon Bedrock, Google Vertex AI, or open-source models in your private cloud.
No training, ever
No ledger, report or record is used to train a model, ours or any provider’s.
Agents draft, people approve
Nothing is posted or sent until a person on your team approves it.
Access control
The right people, only the right rows.
Each user sees only the entities and numbers their role allows.
Role-based, row-level
You define who can view, edit and approve. Enforced in the data layer.
Verified sign-in
Single sign-on and multi-factor authentication on web; registered number plus OTP on WhatsApp.
Named people only
Only named people on your engagement can reach your data, and only for their entities.
Data handling
Minimal access, by design.
We read what the work needs, in the place you choose, and keep it only as long as you set.
Encrypted everywhere
TLS 1.2 or higher in transit, AES-256 at rest.
Isolated per client
Separate Azure resources for every client. Your data never mixes with another’s.
Hosted where you need it
Microsoft Azure, in your tenant or ours, in the region your policy requires.
Personal data masked
Masked as it arrives, before any AI model sees it. Retention follows your contract.
Logging & monitoring
Every action on record.
If an agent touches your data, you can see what it did and who approved it.
Full audit trail
What ran, when, on which data, with which model, and who approved it.
Secrets kept out
Passwords, keys and personal data are stripped from logs.
Exportable
Logs are retained and exported to match your audit needs.
Security
Enterprise controls, every day.
Applied the same way for every client, not bolted on later.
Secure infrastructure
Firewalls, intrusion detection and physical safeguards from Microsoft Azure.
Read-only connectors
Credentials live in a vault. We read from your systems and never write back without approval.
Tested
Regular vulnerability scans, independent penetration tests and a documented incident response plan.
FAQ
Questions security teams ask.
Everything you share or connect: ledgers, sub-ledgers, reports, files and the questions your team asks. It stays yours, and we use it only to deliver your engagement.
Yes. Our ISO/IEC 27001 and ISO/IEC 42001 certificates, security overview and DPA are shared on request. The penetration test summary is shared under NDA.
On Microsoft Azure, in your tenant or ours, in the region your policy requires. Subprocessors are listed in your data processing agreement.
We use enterprise model services that contractually exclude training on customer data, or open-source models in your private cloud. We never train on your data ourselves.
Only the named people on your engagement, for the entities they work on. Access is reviewed with you before go-live and whenever your team changes.
Agents prepare and draft; a person approves before anything is posted. Every action is logged with its input, output, model and approver.
Changes follow a reviewed, tested release process, and we avoid releases during your close and audit windows unless you ask for one.
Yes. We can run inside your own Azure tenant, with open-source models in your private cloud when data must not leave it.
Security review
Security review ahead? We’ll make it quick.
Send your questionnaire. We’ll share our certificates and security overview, and walk your IT, audit and legal teams through every control.