Security

Your financial data. Protected at every layer.

FINIRIX is built for Indian civil contractors who trust it with sensitive financial records. We treat that trust seriously.

Encryption at every layer

  • AES-256-GCM encryption at rest for all stored data

  • TLS 1.3 in transit — all connections encrypted

  • Field-level encryption for OAuth tokens, API keys, and 2FA secrets

  • All encryption keys managed outside application code

Gmail — read-only, always

  • We connect with gmail.readonly scope only

  • We can never send emails, reply, modify, or delete anything in your inbox

  • We never store full email bodies — only the extracted transaction data

  • Connection can be revoked instantly from your Google account settings

Data residency in India

  • All data stored in India — compliant with DPDP Act 2023

  • No data transferred to servers outside India

  • Backups also stored within Indian data centres

  • Data deletion requests honoured within 30 days

Access control

  • Role-based access: Owner, CA, Accountant, Site Manager, Viewer

  • 2-Factor Authentication on all accounts

  • SSO available on Business plan

  • Every login and action logged in the immutable audit trail

  • Audit log retention: 7 years, append-only, no deletions

Our Commitments

DPDP Act 2023

Your data stays in India. Deletion requests honoured within 30 days. You own your data.

AES-256-GCM encryption

The same encryption standard used by banks — applied to every file, token, and field at rest.

Read-only Gmail access

We connect with gmail.readonly scope only. We cannot send, modify, or delete anything in your inbox.

The Founding 100

Join the contractors who will shape FINIRIX.

We are onboarding the Founding 100 personally. Join the waitlist — we will reach out before we open access.

No credit card · Cancel anytime · Price locked at signup