Security & compliance
Built for the RBI audit.
Governance is the product. This page is written to be forwarded to a compliance or risk team — it describes exactly what we receive, how long we hold it, and how every decision is made auditable.
Data minimization
We receive only an application reference plus two name strings. No Aadhaar or PAN numbers, no dates of birth, no addresses, no document images, no biometrics, no financial data.
Immutable audit trail
Every decision logs the confidence score, reasoning, timestamp, model version, and — for human decisions — the operator identity. Queryable for five years.
Never auto-rejects
Uncertain cases are routed to human review, never rejected by the model. Deterministic workflows and a zero-loss dead-letter queue guard against silent failure.
Tenant isolation
Each partner is a distinct tenant. Cross-tenant reads are denied at the API layer, and dashboard access is authenticated with role-based access control.
Regulatory mapping
Architected against the DPDP Act, RBI KYC master direction, and PMLA retention rules. SOC 2 readiness is in progress; certification is targeted, not yet held.
Data residency
Currently hosted on AWS Asia Pacific. India-region residency is on the roadmap. We will confirm current residency in writing during pilot onboarding.
The 7-day PII lifecycle
Personally identifiable data has a strict, short lifespan. The decision record that satisfies auditors lives on; the names do not.
Ingress
Data enters over encrypted HTTPS.
Buffer
Requests hold briefly in a durable queue (max ~1 day) to prevent loss during spikes.
Process
LLM reasoning runs in-memory; raw names are not persisted for reasoning.
Store
The decision record is written to an encrypted, managed database.
Scrub
After 7 days, name strings are replaced with "[SCRUBBED]".
Retain
The non-PII decision record is kept for 5 years for PMLA compliance.
Have a compliance question we haven't answered?
We're happy to walk a risk or compliance team through the approach in detail.