Security
How we keep your company's data safe
Contractors put contract values, bills, wages and workers' details into Mezura OS. This is how that data is kept private, and what you control.
Private to your company
Every record belongs to one company, and every request is limited to that company on the server. One customer can never see another’s data.
Roles that hide money
Staff record quantities, attendance and receipts but never see rates, bills or margins. Managers see only the projects they are given. This is enforced on the server, not just hidden on screen.
We can’t read your data by default
Support access is off. Your Admin can open a read-only window for a fixed time and close it whenever they like, and every read during it is written to your activity log.
Encrypted in transit
Every page and every request uses HTTPS. Passwords are stored only as salted hashes, never in a form we can read.
Private file storage
Drawings, bills and site photos are kept in private storage and opened only through short-lived signed links.
Backed up every night
The database is backed up nightly to separate storage, and restores are tested: the last drill restored every record and checked each collection.
Activity log
Who created, changed, approved or deleted what, and when, is recorded and visible to your Admin.
Minimum personal data
Workers’ Aadhaar numbers are stored as the last 4 digits only, and full numbers are refused. People can ask for their data to be corrected or deleted, as the DPDP Act provides.
No card data
Payments are made by UPI or bank transfer. We never handle or store card details.
Questions, or a security questionnaire to fill in?
Write to info@mezuraos.in. To report a vulnerability, email the same address with "Security" in the subject; we acknowledge reports within one working day.
Read the Privacy Policy and the Data Processing Agreement.