Security overview
Enterprise-ready controls designed for operational data sensitivity.
Encryption
TLS for data in transit. AES-256 encryption at rest for database and file storage. Passwords are never stored in plain text.
Security details →Authentication
Enterprise-grade authentication with secure session management and expiring tokens. Role-based access for executives, clerks, and internal admin operations.
Authentication →Workspace isolation
Each company workspace is isolated using PostgreSQL Row-Level Security. Cross-company data access is prevented at the database layer.
Isolation →Cloud infrastructure
Database, authentication, and encrypted file storage run on enterprise cloud infrastructure with daily backups and point-in-time recovery capabilities.
AI processing
Your data is processed through Zackgo AI Beta and, where applicable, authorised industrial API partners solely to generate your reports and Copilot responses. Deterministic metrics are calculated directly from uploaded data wherever possible. Your data is not used to train models for other clients.
AI Disclaimer →Audit logging
Login events, uploads, and report activity are recorded to support security review and workspace accountability.
Data privacy & storage
Your data remains yours. We process it under a limited license solely to deliver Zackgo services.
Data ownership
You retain ownership of all uploaded workbooks and business data. Zackgo receives a limited license to process data for report generation and related services only.
Intellectual Property →Retention & deletion
Data retention periods are defined in our policy. You may request export or deletion subject to legal and contractual obligations.
Data Retention Policy →Access control
Role-based permissions limit what executives, clerks, and administrators can view or modify within your workspace.
Backups
Automated daily backups with point-in-time recovery support business continuity. Backup scope follows our data retention policy.
Responsible AI & analytics
Evidence-backed intelligence that supports leadership — with clear boundaries on what analytics can and cannot do.
Compliance roadmap
We are transparent about current status and planned certifications. We do not claim certifications we have not obtained.
SOC 2 Type II
Independent security audit framework for SaaS providers.
PlannedISO 27001
Information security management system certification.
PlannedGDPR alignment
Privacy practices aligned with GDPR principles for data subject rights and processing transparency.
In practiceIndian IT Act
Compliance with applicable Indian information technology and data protection requirements.
In practiceData residency
Infrastructure regions are documented in our privacy policy. Enterprise customers may discuss residency requirements.
Incident response
Documented procedures for detecting, containing, and notifying affected customers of security incidents.
Security Policy →Business continuity
Designed for reliability — without promising uninterrupted availability.
Zackgo targets high availability for dashboard and report services. Scheduled maintenance, third-party provider outages, or force majeure events may cause temporary disruption. We communicate known maintenance in advance where possible.
Contact Support