Last updated 14 October 2026 · Sagacity Innovative Private Limited
Your books and your clients' data are the reason SagacityBooks exists, so we treat their safety as part of the product, not an add-on. This page says plainly what is in place today.
Where your data lives
Hosted in India, in a Bengaluru data centre.
Encrypted in transit end to end: HTTPS from your browser to our edge and again from the edge to our servers, with a verified certificate on both legs.
The database and cache are not reachable from the internet; only the web front door is.
Signing in
Two-step sign-in is required for every login: an authenticator-app code, or a passkey (Face ID, fingerprint, Windows Hello), with one-time recovery codes.
Passwords are never stored - only a slow one-way hash (PBKDF2-SHA256, 600,000 rounds).
Repeated wrong passwords or codes are locked out for 15 minutes.
The session lives in a secure, HTTP-only cookie that page scripts cannot read. Your administrator can see every active session and sign any of them out.
Who can see what
Every CA firm's data is separated, and the separation is checked on every request - not just when a screen is opened.
Within a firm, staff see only the clients assigned to them, and each person's rights (view, create, edit, delete, file) are set individually, down to single functions.
A business's own logins see only that business.
Every change is on record
An audit trail records each change to the books - who, when, and the values before and after - in an append-only log sealed with a hash chain, so an edit to the log itself would show.
Invoices already reported in a filed GSTR-1 cannot be deleted or cancelled; corrections go through an amendment or a credit/debit note, as the law expects.
Closed periods can be locked so finished years stay finished.
Backups and recovery
The database is backed up every four hours.
Each backup is encrypted (AES-256-GCM) before it leaves the server and copied off-site to separate storage, so losing a server does not lose your books.
A restore is rehearsed every month to prove the backups actually come back.
You can download a complete backup of any of your businesses at any time.
Keeping records as the law requires
Accounting and GST records are kept until 8 years after the last financial year with entries, and longer under a legal hold (for example an open assessment). Deleting a business archives it first; it is erased only when that period ends.
AI, payments and outside services
The in-app assistant sends an AI provider only what is needed to answer the request you make - not your whole books - and we use the providers' paid API services, which do not train on your data.
Card, UPI and bank details are handled by our payment gateway (Razorpay); they never reach us.
GST portal, e-invoice and e-way bill calls go through a licensed GST Suvidha Provider, only when you ask for them.
Watching the service
Health, disk space, backups and the job queue are checked continuously and alert our team.
A release that fails its checks is rolled back automatically.
Server logs are kept for 180 days, as CERT-In directions require.
Report a concern
If you believe you have found a security issue, write to [email protected] with the details. We acknowledge within 48 hours and will keep you told until it is fixed. Please don't access or change other people's data while testing.