KirayaSetu
Security at Kiraya Setu

Enterprise-Grade Security
For Your Property Data

We handle sensitive landlord and tenant data with the utmost care. Our security architecture is built on industry-leading practices to keep your data safe.

AES-256 Encrypted
99.9% Uptime SLA
24/7 Monitoring
Our Security Stack

Multiple Layers of Protection

Security is baked into every layer of our platform, from infrastructure to application code.

TLS 1.3 + AES-256

End-to-End Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive data stored on our servers is encrypted at rest using AES-256.

OAuth 2.0

Secure Authentication

We support secure password authentication with bcrypt hashing, Google OAuth, and session management with automatic expiry for inactive sessions.

99.9% Uptime

Secure Infrastructure

Kiraya Setu is hosted on enterprise-grade cloud infrastructure with DDoS protection, automated backups, and 99.9% uptime SLA.

RBAC

Access Control

Role-based access control ensures each user can only access their own data. All API endpoints are authenticated and authorised.

24/7 Monitoring

Intrusion Detection

Our systems continuously monitor for suspicious activity, unusual login patterns, and potential security threats with automated alerting.

Full Audit Trail

Audit Logging

All significant actions within your account are logged and timestamped, providing a complete audit trail for compliance and security review.

6-Hour RPO

Automated Backups

Your data is backed up automatically every 6 hours with point-in-time recovery capabilities. Backups are stored in geographically separate locations.

OWASP Compliant

Vulnerability Management

We conduct regular security audits and penetration tests. Our development team follows OWASP security guidelines for all code changes.

How We Handle Your Data

Transparency about our data practices is fundamental to the trust you place in us.

🆔

Tenant KYC Documents

KYC documents (Aadhaar, PAN, etc.) uploaded to our platform are stored encrypted and are only accessible to the landlord who uploaded them. We do not process or share these documents with any third party.

💳

Payment & Financial Data

Payment records are stored in encrypted databases. We do not store credit card or UPI credentials. Payment processing is handled by certified payment gateways compliant with Indian payment regulations.

📄

Lease Agreements

AI-generated and uploaded lease documents are stored securely and are accessible only to you and your designated team members. Documents are backed up automatically.

🏠

Property & Unit Data

Property details, rental amounts, and unit information are stored privately per account. This data is never used for any purpose other than providing our service to you.

Best Practices for You

Security is a shared responsibility. Here is how you can protect your account.

1

Use a Strong Password

Create a unique password for Kiraya Setu with at least 12 characters, including uppercase, lowercase, numbers, and symbols.

2

Use Google Sign-In

Using Google Sign-In adds an extra layer of security through Google's robust authentication infrastructure.

3

Keep Your Email Secure

Your account recovery relies on your email. Use a secure email provider and enable two-factor authentication on your email account.

4

Monitor Login Activity

Regularly review your account activity. Contact us immediately if you notice any unfamiliar login locations or activity.

5

Log Out on Shared Devices

Always log out of your Kiraya Setu account when using shared or public computers.

6

Keep Contact Info Updated

Keep your phone number and email address up to date so we can contact you in case of suspicious activity on your account.

Found a Security Issue?

We value the security research community and take all vulnerability reports seriously. If you discover a security issue, please report it responsibly and we will respond within 48 hours.

✓ Please do not exploit vulnerabilities or access other users' data

✓ Provide a detailed description of the issue and steps to reproduce

✓ We will acknowledge your report and keep you updated on our fix