Skip to content

Security

Your servers. Your jurisdiction. Your control.

Written for the IT and security reviewer. Here is where the data lives, who can see it, and what is recorded.

Where your data lives

Not a tier, not a setting — the architecture.

Sage

Runs entirely inside your own infrastructure: your servers, your data centre, your jurisdiction. Nothing is sent to a third party, so there is no external processor to add to your records and no transfer to justify.

Kshetra and Arrivo

Deployed on your terms. Your data stays yours.

To confirm: deployment options (your infrastructure / government-approved cloud) and data export and removal policy.

There is no third party in this system. That is not a feature we added; it is the reason the system is shaped the way it is.

Who can see what

Access follows your structure.

  • Scoped by organisation, unit and individual.

    A user reaches their own material, their unit's, and the organisation's standing material — never a colleague's private notes.

  • Enforced at the data layer.

    Scope is applied where data is stored, not in the interface, so it holds however a question is phrased.

  • Role-based workflows.

    In Arrivo and Kshetra, what a person can assign, edit, verify or close depends on their role.

  • Public and internal kept apart.

    In Arrivo, each update has an internal note and a separate public summary. The complainant sees only the public one.

What is recorded

Everything is logged.

The audit trail is not a compliance box. It is what makes the deployment defensible when questions are asked.

Who asked what, what was returned, and under what access.
Every assignment, reassignment, note, voice note and status change.
Every task's route, location and compliance proof.

How it connects

Adds to your systems. Replaces none.

  • Reads from where your material already lives. Nothing has to be migrated.
  • Works alongside existing government and enterprise systems.
  • APIs let external systems and partners push issues and events in.

What you need to run it

Technical requirements.

To confirm: server and hardware requirements · supported operating systems · identity and single sign-on integration · encryption at rest and in transit · backup and recovery · support model.

Your obligations

Compliance is a property of your deployment.

Nayatra supports your obligations on data protection, record-keeping and human oversight by providing local hosting, scoped access and a full audit trail. We will walk your legal and IT teams through exactly what each product provides.

Bring your IT team.

An architecture review: how a Nayatra product would sit inside your network, and what it needs.