Plain-spoken,
technically honest.
No marketing puff. Below: how we protect your data, what we're certified for, what we're working on, and how to report a vulnerability.
Your books stay with you
Fintroller runs on your machine. Your accounting data is read over your own office network — not uploaded to someone else's cloud.
Bank connections you control
Bank statements arrive through the RBI-regulated Account Aggregator framework. Your bank shows you its own consent screen — we never see your password or OTP, and you can revoke any time.
You hold the signature
Filings are signed with your own digital-signature token, on your machine. No third party signs on your behalf; nothing is submitted without you.
Audit trail on everything
Every action — agent or human — is logged with timestamp, actor, and rationale. Exportable for ICAI or any statutory review.
Encryption everywhere
TLS 1.3 in transit. AES-256 at rest. Per-tenant key isolation. No shared encryption surface.
No model training on your data
We never use your books to train models. Customer data is contractually walled off from our research stack.
Where we are. Where we're going.
Report a vulnerability.
We pay between ₹50,000 and ₹5,00,000 per valid finding, depending on severity. Send a detailed report to security@fintroller.com with reproduction steps and impact analysis. We respond within 24 hours.
Be early.
Founders' pricing, locked for life. Priority onboarding for early members.