Trust, built into the software.
A regulator’s question rarely arrives at a convenient time.
When it comes, answer from the system. Not from memory or old email threads.
In place today
Access
- Invite-only, with no public sign-up.
- Staff see only their clients; clients only their own data.
- Deactivated accounts are refused at once.
Consent
- Clients approve each identity check with a one-time code.
- Consent records are kept.
- Only a parent can consent for a child.
Records
- Goal changes need a manager and the client.
- Onboarding needs a second person’s approval.
- The research audit log can’t be edited.
Identity and signatures
- Aadhaar eSign on research reports.
- Full Aadhaar numbers are never stored.
- One-time codes are stored hashed.
Data rights (DPDP Act, 2023)
- Download, correction, a data nominee and account closure.
- Notices in English, Hindi and Telugu.
- A named Grievance and Data Protection Officer.
- A breach register with CERT-In and DPB timelines.
Infrastructure
- HTTPS everywhere.
- Pages cannot be embedded in other websites.
- Secret keys live only on the server.
Found a security issue?
Write to reach@sampadha.com. We read every report and will reply.
See it with your own cases.
Tell us how your week runs today. We’ll show you the same week on Fintecindia.
Hyderabad, Telangana 500089 ·Open in maps