Security and data
Your data is designed to stay in India.
Kubr is pre-launch. This page describes what each engagement is designed to run under, not audited facts. For India, the data location terms are a design commitment made before launch.
Kept in India
Kubr's design commitment for India, pre-launch, is that data is sourced from providers licensed in India and handled inside India. Nothing about an Indian company or its people is meant to leave the country for processing.
Where records come from
Government registers and portals, RBI-authorised Account Aggregators, licensed GST Suvidha Providers and registered rating agencies, all operating in India.
Where data is processed
Storage and analysis are designed to sit on infrastructure in India, under the DPDP Act, 2023 and its Rules as they phase in. RBI rules require payment-system data to be stored in India, and we treat Account Aggregator data the same way as a matter of design. Cross-border transfers: none, by design. Exact legal duties to be confirmed with local counsel.
Consent-bound
Bank and GST data arrive only with the company's approval, for one engagement, for a stated period.
Encrypted
Data is encrypted while it moves and while it is stored.
Access limited and logged
Only the engagement team can open client files. Every access is recorded.
Not for training
Client data will not be used to train models, ours or anyone else's. The engagement letter will say so.
Deleted on schedule
Engagement files are kept for the period the law requires, then deleted. Enquiries that go nowhere are deleted after 12 months.
Sub-processors
Outside firms that handle data for us are listed in our data processing agreement. Clients receive it before any data moves.
Certification
We are working toward ISO/IEC 27001. We will show the certificate when we hold it, not before.
Status of these controls
The engagement letter and the data processing agreement confirm these controls. They are commitments, not certifications.
This preview site
Enquiries and feedback sent through this preview are stored on a hosted preview service, not in the environment described here, and can be seen by people who can open this page. Do not send company documents or personal data here. Write to hello@kubr.in instead.
Reporting a flaw
Write to hello@kubr.in. We reply within three business days and will not act against good-faith research.