Security you can interrogate

Sensitive borrower fields and every provider credential are encrypted at rest; all traffic runs over HTTPS with certificates issued and renewed automatically.

PAN, Aadhaar, DOB and contact details render masked behind an eye toggle — seeing the full value is a deliberate, permission-gated act.

Seeded role desks with least-privilege defaults, plus per-user permission grants for exceptions — the effective access set is visible on one screen.

A readable action log plus field-level before/after diffs, written by the platform core — features cannot opt out of the record.

Disbursals require separate preparing and approving hands, with reasoned send-backs — no single person moves money alone.

Each entity’s data is scoped per tenant in the data layer; row-level visibility scopes desks within a tenant on top of that.

Edit windows per role and lifecycle stage — approved and disbursed files can’t be casually modified by anyone who happens to open them.

Data downloads are page-wise permissions granted per user — there is no single “export everything” switch to leak a book through.

Infrastructure runs in India, in line with where lending data should live, with staff login controls — enforced login modes, leave-aware access and login history.