Architected for Showroom Data
Protection & Compliance
Jewellery trade secrets, bullion cost books, and high-net-worth customer records demand uncompromising architectural security. Here is how TakeYourBill safeguards your business.
Six Layers of Protection
Every layer independently prevents data leakage — no single point of failure.
Multi-Tenant Row-Level Security (RLS)
Every database query enforces cryptographic tenant context at the PostgreSQL kernel level. Tenants cannot inspect, query, or infer another showroom's data under any condition.
AES-256-GCM Envelope Encryption
Sensitive regulatory PII (such as Customer PAN numbers and contact numbers) is encrypted at rest using AES-256-GCM envelope encryption with tenant-isolated data keys.
HMAC Blind Indexes for Search
High-entropy HMAC-SHA256 blind indexing allows rapid exact-match lookups (e.g., searching customer PAN or phone) without exposing decrypted plaintext to database queries or index logs.
PostgreSQL Anti-Tamper Triggers
Statutory tax invoices, Rokar Daybook vouchers, and scheme redemptions are protected by database-level immutability triggers preventing post-facto modification or deletion.
Host-Only SaaS Session Perimeter
Authentication session cookies (tyb_session) are strictly host-only for app.takeyourbill.com. Public marketing and documentation pages maintain zero access to tenant auth tokens.
Zero Plaintext Exposure on Public APIs
Digital showcase and tablet kiosk QR tokens use 256-bit cryptographically secure hashes, ensuring zero customer inquiry privacy leaks to unauthorized observers.
Your Data is Safe with TakeYourBill
Enterprise-grade protection that lets you focus on your customers, not your servers.
Start Your Secure Trial