Trust and security
How the platform protects financial data, how AI is kept in its place, and what we have not done yet. We will keep this page current.
Where data lives today
MedhaNova does not host any customer data yet. The platform is in development, and the pilot environment has not been set up. When it is, it will run in an India-region cloud, and every product is designed so it can also run on your own servers.
Controls built into the platform
- Each company’s data is kept separate from every other company’s.
- Every change is recorded, with who made it and when. The record cannot be edited, deleted or switched off.
- Unbalanced entries cannot be posted, and closed periods stay closed.
- Approvals use maker-checker and segregation of duties; the person who prepares an entry cannot approve it.
- Backups are encrypted, and restoring them is tested, not assumed.
How AI is used
- Calculations, postings and approvals are deterministic. AI does not perform them.
- AI agents can analyse, explain, flag anomalies and draft proposals. An AI output is never an approval.
- Important decisions can require a further approval.
What we have not done yet
We do not yet hold SOC 2 or ISO 27001 certification, and independent security testing of a hosted environment is still to come. We will list results here when we have them, and not before.
Personal data
We handle personal data under India’s Digital Personal Data Protection Act, 2023. Our privacy notice explains what we collect through this website and how to exercise your rights.