DPDP ACT 2023 COMPLIANT PRIVACY ARCHITECTURE

Visible Trust, Honest Architecture.

Suranyx is built for solo Indian founders and freelancers who require absolute financial accuracy and zero file retention. We document our exact technical practices plainly — without marketing spin.

1. Zero File Retention Guarantee

Your raw bank statement PDF or CSV is never stored on disk.

When you upload a statement, it is streamed into ephemeral memory, parsed into structured date/narration/amount rows, and immediately discarded from RAM.

We do not maintain an S3 bucket, Cloud Storage bucket, or temporary disk folder for raw statement files. Only the extracted transaction rows (e.g. date, vendor name, amount, category) reside in your database account.

2. Deterministic Arithmetic — Never LLM Guessing

Exact formulas with zero hallucination risk.

Financial tools that ask Generative AI to "forecast" bank balances produce subtle, dangerous arithmetic hallucinations. Suranyx operates on pure deterministic logic:

  • Runway Forecasts: Calculated with discrete weekly differential arithmetic: Balance(Wn) = Balance(Wn-1) + Inflow - Fixed - Variable.
  • GST Input Tax Credit: Extracted using deterministic regex matching against vendor GSTINs and 18% / 28% tax rates.
  • AI Assistant Scope: Our natural language assistant is strictly read-only, answering queries via structured database SQL filters, never writing or guessing financial figures.

3. What We Store vs What We Never Collect

Complete data transparency for your privacy peace of mind.

WHAT WE STORE (USER-SCOPED)
  • • Transaction date, sanitized narration, amount
  • • Categorization tag & matched regex rule
  • • Running statement balance
  • • User-configured safety buffer threshold
  • • Per-user custom categorization memory rules
WHAT WE NEVER COLLECT / STORE
  • • Full bank account numbers (masked only)
  • • Netbanking passwords or MPINs
  • • PAN / Aadhaar card images
  • • Raw statement files (PDF/CSV)
  • • Third-party analytics or advertising trackers

4. Infrastructure & Region Isolation

Enterprise cloud hosting with Mumbai data residency.

Edge Computing: Hosted on Vercel Global Edge Network with automatic TLS 1.3 encryption in transit.

Database Isolation: PostgreSQL with Row-Level Security (RLS) hosted in the AWS ap-south-1 (Mumbai, India) region.

Data Erasure: You can delete all statements, transactions, and learned rules from your Settings modal at any time with immediate cascading hard deletion.

5. Responsible Disclosure & Security Contact

Direct point of contact for independent security researchers.

Security reports and vulnerability findings are triaged directly by our founding engineering team.

Security Contact:[EMAIL_PENDING_MAIL_SETUP]

Experience deterministic cash flow visibility

Upload a statement to test your 13-week forecast in 5 seconds.

Open Command Center