Your data, protected

Your data is safe with us.

Your donor list and financial records are private, encrypted, and backed up daily. We take security seriously so your NGO doesn't have to.

Your data stays in India

All your data is stored on servers in India. We follow Indian data residency requirements under the DPDPA 2023. Your donor information never leaves the country.

FCRA funds are tracked separately

Foreign donations are automatically kept separate from Indian donations, as required by FCRA. You don't need to manage this manually. If you're ever audited, the records are already clean.

Every team member sees only what they need to

Assign different roles to your finance team, programme managers, and volunteers. Each role controls which sections and features a team member can access.

Donor data is encrypted

Sensitive donor information (PAN numbers, bank details, contact information) is encrypted at rest and in transit. Payments go through Razorpay. We never see or store card numbers.

Daily backups

Your data is backed up every night. If anything ever goes wrong, nothing is lost. Live status of every production component is published on our status page - we don't advertise an uptime SLA we can't back with probe history.

How we comply

Built for Indian regulatory requirements.

Regulation	What we do
DPDPA 2023	We follow India's Personal Data Protection Act. Your donor data is processed lawfully and stored only in India.
FCRA	Foreign contributions tracked and reported separately, as required by the Foreign Contribution (Regulation) Act.
IT Act 2000	Data processing in line with Indian information technology law.
80G / 12A	For registered organisations, tax-deduction receipts are generated to Income Tax specifications and sent to donors automatically.
Form 10BD	Export ready for annual Income Tax filing: one click, government-prescribed format.

Have a security question?

We'll answer it honestly, before you sign up.

Ask us anything

Where we stand today

The compliance ground truth.

DPDPA 2023 Compliant

Data Fiduciary registration on file. Phase I (data principal rights, breach notification) live; Phase II (consent manager handshake) targeting Nov 2026 with the official DPDP commencement; Phase III (cross-border transfer rules) tracking May 2027.
FCRA 2010 Compliant

FCRA-designated bank account routing enforced at validation and model level. FC-3C / FC-6 generated from the donation register; transaction ledger exportable.
IT Act 2000 Compliant

Records retention, audit-trail and authentication aligned with the Information Technology Act and CERT-In incident-reporting timelines.
Section 80G / 12A Compliant

Receipts generated in the CBDT-prescribed format. Form 10BD / 10BE export ready for annual filing in one click.

We only badge what's already in force. Third-party security attestations are work-in-progress and will appear here once the certificate is issued, not before.