ShramSaathi.in

Data security

How ShramSaathi protects workforce data.

Controls

Role-based access control, two-factor authentication, account lock-out, session protection, CSRF protection, encryption of bank details and credentials (AES-256-GCM / libsodium), private file storage and a complete audit trail with user, time, IP and old/new values.

Tenant isolation

Every record belongs to one organisation and every query is scoped to it; consultants see only clients they manage; principal employers see only their contractors’ records for their sites.

Backup & retention

Encrypted exports to India-region cloud storage (AWS Mumbai/Hyderabad or OneDrive), retention of registers for the statutory period and erasure afterwards, as required by the DPDP Act, 2023.