Organisation isolation
Each organisation’s records are kept within its own boundary.
SECURITY & TRUST
Control over who acts. A record of what changed.
The developer’s office handles buyer information, member commitments and financial records. Access and accountability are part of the workflow.
NirmaanOneAccess & record historyILLUSTRATIVE PROJECT RECORD
Access & record history
Organisation isolationRecords stay within their organisation
Role permissionsRead, prepare, approve and post
Two-factor sign-inOptional or required by the organisation
Session controlsIdle expiry and sign out everywhere
Audit historyChanges remain traceable
AVAILABLE CONTROLS
Permissions that follow responsibility.
Role-based access
Twelve ready-made roles with permissions for actions such as reading, preparing, approving and posting.
Project access per user
Give each user all projects or selected ones. Every list, count and record respects it.
Sign-in and sessions
Optional or required two-factor authentication, one-day idle sessions and sign-out everywhere.
Record history
An audit trail keeps changes traceable. Accounting corrections preserve the posting history.
Protected attachments
Attachments are not public links. Access is controlled as part of the product.
DATA PROTECTION AND LOGGING
Personal data and system logs, handled to Indian rules.
Buyer, member and staff records are personal data. These controls are part of the product, not an add-on.
Built for the Digital Personal Data Protection Act, 2023: consent records, purpose limitation, data principal requests and a named grievance officer.
Logging, 180-day log retention in India and incident reporting aligned with the CERT-In directions of April 2022.
WHO DOES WHAT
What NirmaanOne does, and what stays with you.
Software keeps the record and the evidence. Certification, tax judgement, banking and filing stay with the people accountable for them.
StandardNirmaanOneStays with you
DPDP Act, 2023
Keeps consent records, limits data to its purpose, handles data principal requests and names a grievance officer.
Your organisation decides why buyer and member data is collected and who in your team may see it.
CERT-In
Keeps logs for 180 days in India and reports incidents in line with the April 2022 directions.
Your own devices, user accounts and staff practices.
ASK FOR THE CONTROL, NOT THE BADGE
Bring your security questions to the demo.
Ask the team to show role permissions, a sign-in policy, a record’s history and the approval path for money out.
Scope matters.
This page describes product controls. It does not claim an independent security certification, a specific hosting region or a contractual service level.
Interface masking of personal information and login throttling are not claimed as live controls in the current product brief.
QUESTIONS, ANSWERED
A few useful answers.
Have a project-specific question?
Bring it to the walkthrough.
Does the AI connector bypass permissions?
No. The supplied product capability is an AI connector working within the user’s permissions. It does not provide a separate unrestricted view of organisation data.
Can users be limited to one project?
Yes. Give a user all projects or selected ones. Every list, count and record respects that access, on top of organisation isolation and role-based permissions.
Where can we review the privacy policy?
The website privacy notice is linked in the footer. Commercial, hosting and data-processing terms for the application should be agreed with the team during procurement.
ONE BUSINESS. ONE SOURCE OF TRUTH.
Ready to move your business beyond Excel?
Schedule a live demo with our sales team. See how your separate trackers become one connected workflow, and plan your first project in 48 to 72 hours.
Your questions. The actual product. A plan to get started.