How we protect your business records.

• Each business's records are separated in the database. Access rules are checked by the database on every request, not only in the app's screens. [CONFIRM]
• Connections to eHisaab use HTTPS. [CONFIRM]
• Stored data is encrypted at rest by our hosting provider. [CONFIRM]
• Customer and vendor PAN and phone numbers are masked in bulk exports unless the person exporting is an owner or admin. [CONFIRM]
• Data is stored in [hosting region]. [CONFIRM]

• Every person has one role per business: owner, admin, accountant, cashier, inventory manager or viewer. The database enforces what each role can do. [CONFIRM]
• Owners and admins must use two-step verification with an authenticator app. Admin-only actions are refused unless the session has been verified with a code. [CONFIRM]
• Passwords must be at least 12 characters, and passwords found in known data breaches are rejected. [CONFIRM]
• Sessions sign out after 30 minutes of inactivity. Users can sign out of all devices, and changing a password signs out other devices. [CONFIRM]
• Cancelling a posted invoice needs approval from a second person. [CONFIRM]
• Bulk exports over 500 rows need approval from an owner or admin, and exports are rate-limited per user. [CONFIRM]
• eHisaab staff access to customer data: [describe who can access production data and under what conditions]. [CONFIRM]

• Changes to invoices, payments, contacts, products, stock, roles and tax settings are recorded with the user, time, and before and after values. [CONFIRM]
• Sign-ins, failed sign-ins, sign-outs and exports are recorded with IP address and browser. [CONFIRM]
• App users cannot edit or delete audit log entries. [CONFIRM]
• Posted invoices cannot be edited or deleted; corrections are made with a linked credit note. [CONFIRM]
• Audit log retention: [retention period]. [CONFIRM]

• Backup frequency: [frequency]. [CONFIRM]
• Backup retention: [retention period]. [CONFIRM]
• Backup location: [location]. [CONFIRM]
• Restore testing: [how often restores are tested]. [CONFIRM]
• Customers can export their own records at any time as CSV or Excel from the Exports page. [CONFIRM]

• How we detect incidents: [describe monitoring]. [CONFIRM]
• Who responds: [team or role]. [CONFIRM]
• Customer notification: we will notify affected customers within [time period] of confirming an incident that affects their data. [CONFIRM]
• Regulator notification: [describe obligations under Nepal law]. [CONFIRM]

If you believe you have found a security issue in eHisaab, email [security@yourdomain]. Please give us reasonable time to fix it before disclosing it publicly, and do not access or change other people's data while testing. We will acknowledge reports within [time period]. Machine-readable contact details are in /.well-known/security.txt.