Security & Governance
Enterprise Security, Tenant Isolation & Compliance Architecture
1. Strict Tenant Data Isolation
Every API endpoint and database query enforces authenticated companyId scoping, verified by automated cross-tenant isolation tests.
2. Encryption & Credential Safety
TLS 1.3 encryption in transit, bcrypt password hashing, and zero plain-text storage of GST/tax portal passwords (GSP/OTP consent flow).
3. Immutable Audit Log
All voucher creations, approvals, reversals, period locks, and super-admin actions record user, timestamp, IP, and before/after values.
4. Daily Backups & Restore Testing
Automated daily database snapshots with point-in-time recovery verification and financial year period locking.