Trust and your data

Where your data is stored

Client accounts, uploaded documents and filing records for harunraaj.com and pvtltd.co are held in one Supabase project: a managed Postgres database with file storage.

That project runs on Amazon Web Services in the ap-southeast-1 region (Singapore).

Encryption of sensitive fields

Income-tax portal passwords you share with us are encrypted with AES-256-GCM on our server before they are stored. The key is a server-side secret and is not sent to your device.

Founder Aadhaar numbers collected for company incorporation are encrypted the same way; the full number is never written to the database in plain form.

AI drafts, the CA signs

We use AI to prepare first drafts, such as GST notice replies and certificate text. Our system has a step where the Chartered Accountant reviews and approves each AI draft, and it records that approval.

Certificates are signed by the CA with a Class-3 digital signature and carry a UDIN generated on the ICAI portal.

Deletion

To ask for your personal data to be deleted, write to hr@hr-ca.com. Records the law requires us to keep are retained for the statutory period; see our Privacy Policy.