Security

Built to protect citizen data

Constituency offices hold sensitive information. These are the controls JantaDesk uses today.

A gram panchayat office building
Photo: Snehrashmi / CC BY-SA 4.0

Controls in the product

Row-level security

Every office’s records are isolated by PostgreSQL row-level security policies, so one office can never read another’s data.

Role-based access with scopes

Each role has explicit permissions, limited to wards or areas where needed. Every route checks its permission.

Audit log

Changes are recorded with who, what and when. Sensitive fields are redacted in the log.

Encryption

TLS for all traffic. Sensitive fields such as identity numbers are encrypted at the field level with key rotation.

DPDP workflows

Consent records, access and erasure requests, retention policies and a grievance officer page.

Backups and hosting

Daily database backups. India hosting is available for offices that need it.

Responsible disclosure

Found a vulnerability? Write to the security contact on our contact page. We do not claim certifications we do not hold.

Contact
Get started

See JantaDesk with your own workflows

A 30-minute walkthrough in Hindi or English, planned around your office.