01Certified security
- ISO/IEC 27001:2022 certified information security management system (certificate 24IVC623, valid until 25 November 2027).
- Regular VAPT (vulnerability assessment and penetration testing) by independent testers.
- FIU-IND registered entity (FIUREID BF00069736), with KYC and AML controls.
02Your company, your own database
Every Customer gets a separate, isolated database and its own zeerow link. One company's data is never mixed with another's.
03Money moves only with approval
- Maker-checker flow: one person raises a payment, the levels your company sets verify it, and only then can it be released.
- Release needs the payer's PIN. Approvers can mark notes as "must read" before release.
- The payee's bank-verified name, history and pending payments are shown before release.
- Limits and controls per wallet, per person and per category.
04Infrastructure
- Hosted on Amazon Web Services.
- All traffic encrypted in transit (TLS).
- Payments run on NPCI rails through RBI-regulated partners.
05Access and audit trail
- Role-based access: every User sees only what their role needs.
- Complete audit trail of who raised, approved, edited and released every payment.
- Instant card block and access removal when someone leaves.
06Incident response
We monitor the platform continuously. Security incidents are reported to CERT-In and affected Customers as required by law, and handled under our incident response plan.
07Report a vulnerability
Found something? Please tell us privately under our Responsible Disclosure policy.