MarginPulse Pro is built on India's own regulated financial data infrastructure. Here's exactly how we protect your data — no vague promises.
Bank connections use India's regulatory AA framework — a consent-based, read-only mechanism approved by RBI. We never see your credentials. You authorize directly with your bank. Revoke access anytime from your bank app.
MarginPulse Pro can read your transactions to reconcile them. It cannot initiate transfers, make payments, or take any action on your behalf — by design, not policy. This is a cryptographic constraint, not a setting.
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Bank account numbers are field-encrypted in the database using Fernet symmetric encryption — never stored in plaintext, even internally.
GST portal access is via the official Government-authorised GSP channel. We access exactly the data you authorise — GSTR-2A/2B filings — nothing else from the portal.
Your financial data is never sold, shared with advertisers, or used to train AI models. It is used exclusively to provide you with reconciliation outputs.
Bank access revocable directly from your bank's mobile app. GST portal access revocable from portal settings. No need to contact us. Revocation is immediate.
All API endpoints are rate-limited. Login is capped at 5 requests/minute per IP. Uploads have a 25MB hard limit enforced before files are read into memory. Constant-time password verification prevents timing attacks.
Found a security issue? Email security@marginpulse.in. We respond within 24 hours with a remediation timeline and will credit your disclosure publicly.
We're happy to walk your security or legal team through our architecture, data flows, and regulatory compliance in a 30-minute call.
Talk to Our Security Team