Security

Your data is protected

DPDP-compliant architecture designed for Indian financial data

DPDP Compliant

Full compliance with India's Digital Personal Data Protection Act. Your data rights are respected.

Private AI Processing

PII-bearing data processed on our private, self-hosted model (vLLM). Public market data via Google Gemini — no user profile data ever reaches an external AI API.

Encrypted Storage

Fernet symmetric encryption for sensitive data at rest. Your encryption keys, your data.

SHA-256 Deduplication

Every upload is SHA-256 hashed to prevent redundant processing and ensure data integrity.

Auto Cleanup

Uploads deleted after 30 days. No indefinite retention.

How it works

How your data flows through iNiveś

1
Upload your portfolio file
2
PII is sanitized (PAN, email, mobile masked)
3
Portfolio parsed (CAMS/KFintech MF, CDSL/NSDL Equity)
4
Instruments matched via ISIN
5
Scored through 171-node DAG engine
6
AI narrative generated (Gemini public / private vLLM model)
7
Results delivered to your dashboard

Key privacy guarantees

PII never reaches cloud LLMs

PAN, email, mobile, folio numbers are masked before any processing. Hybrid routing sends portfolio-derived data to our private vLLM model, public market data to Google Gemini.

Fernet encryption at rest

All sensitive data encrypted with Fernet symmetric encryption. You control the keys — we never have access to your unencrypted data.

SHA-256 deduplication

Every upload is SHA-256 hashed. Duplicate files are detected instantly, preventing redundant processing and storage.

Tiered data retention

Uploaded files and derived holdings are deleted after 30 days; masked logs up to 90 days and anonymized records up to 180 days. No indefinite retention, no dark storage — your data lifecycle is transparent and predictable.

Report a vulnerability

If you discover a security issue, please report it responsibly through the contact form. We triage every report within 48 hours.