Most vendor security pages are a wall of certification badges. We are a young company and we have none of them yet, so this page says what actually exists — and names what does not.
Stated plainly, because a buyer finding out during diligence is worse than a buyer finding out here.
Controls are built against the Trust Services Criteria. No audit has been completed and no report exists yet.
On the roadmap. Scoping is done; the certification process has not started.
We make no HIPAA claim. If you need it today, we are not the right vendor.
Purpose limitation, consent records, deletion on request, and breach notification paths. This is our home regulation — we are headquartered in Jaipur.
AES-256 at rest, TLS 1.3 in transit. No customer data moves between services unencrypted.
Role-based access control with a single permission tree across every module, not one per module.
SSO via SAML and OIDC, with SCIM provisioning and de-provisioning. Available on Enterprise.
Bring your own encryption keys on Enterprise plans, so revoking access is your decision, not a support ticket.
Every action an AI agent takes is written to an immutable log — what it did, on whose authority, and against which record.
Agent actions that change data can require human approval before they commit. You choose which ones.
An AI agent that can write to your CRM is a user with credentials. It should be governed like one. In KaryaFlow an agent inherits the same permission tree as a human, cannot exceed the scope it was granted, and writes every action to the same immutable log your people write to.
Two questions are worth asking any vendor selling you agents, including us. Show me the log of what the agent did last week. Show me how I stop it doing something I have not approved. If either answer is a roadmap item, you are being sold a demo.
We wrote up the full model in AI agent security, the part vendors skip.
Found something on this site that contradicts this page? That is a bug and we want to know. Report security issues through responsible disclosure.
