Security you can audit, not just read about

Isolation

One database per tenant, no shared transactional tables, scoped signed URLs, and region-bound backups.

Identity and access

Microsoft Entra ID (OIDC) plus forms auth, enforceable MFA, and RBAC by role, module and level with per-user overrides. SSO and SAML with Okta and Google Workspace.

Audit

Append-only per-tenant audit with before and after and a reason, login audit with IP and location, and immutable finalised documents.

Support access governance

Impersonation only with a ticket, a reason and a bounded duration; it auto-expires and is always logged.

Encryption and data protection

TLS 1.2+, encryption at rest for databases, backups and objects, envelope-encrypted integration secrets, masked Aadhaar, and encrypted offline payloads with remote wipe.

Backups and disaster recovery

Daily per-tenant backups, point-in-time recovery, 30, 60 or 90-day retention, in-region by default with cross-region opt-in.

Retention

Seven years for transactions, documents and audit; two years for login audit; a 30-day soft delete.

Compliance posture

GST-compliant invoicing and returns, per-tenant data residency, a WCAG 2.1 AA target, and a secure SDLC. FieldDNA operates SOC 2 Type II- and ISO 27001-aligned controls.