Data & Security

Protecting your data is fundamental to ViDU Lite. This page summarises the technical and organisational measures YantrAdhigam uses to keep it safe.

1. Encryption in transit

All connections to ViDU Lite are protected with TLS 1.2 or higher.

2. Encryption at rest

Data is encrypted at rest using AES-256, and sensitive secrets such as outgoing-mail and payment credentials are stored encrypted (AES-256-GCM) in the database and never exposed back to the interface.

3. Password security

Account passwords are stored only as salted hashes, never in plain text, never recoverable.

4. Access control (RBAC)

Role-based access control with granular capabilities governs who can see and do what. Visibility follows your organisation hierarchy (row-level scoping), and access is least-privilege by default. Authenticated APIs use per-user tokens with expiry.

5. Auditability

Every editable record carries a field-level audit log, a complete, attributable history of what changed, by whom and when.

6. Tenant data isolation

Each organisation's data is logically isolated; we do not commingle customer data.

7. API & application security

• Origin validation and CORS controls on the API.
• Input validation on requests.
• Privacy-first proof-of-work protection on public forms (no third-party tracking CAPTCHA).

8. Infrastructure & backups

ViDU Lite runs on PostgreSQL with automated backups. Media storage can be configured to S3-compatible object storage for durability.

9. Incident response & breach notification

Suspected incidents are investigated promptly. In the event of a personal-data breach we notify the Data Protection Board of India and affected Data Principals, and (where applicable) EEA/UK supervisory authorities and our customers, without undue delay and within the timelines required by law.

10. Retention, deletion & processing terms

We retain data only as long as needed to provide the Services or as the law requires, and on termination make your data available for export for 30 days before deletion in the ordinary course. How we process your personal data is described in our Privacy Policy.

11. Reporting a vulnerability

Found a security issue? Please report it responsibly to security@yalabs.in and we will acknowledge it promptly.

12. Contact us

Security questions? Email security@yalabs.in or info@yalabs.in.