Security
Your books are safe here.
Businesses trust Ordwell with their books, their customers and — for solar installers — their customers' identity documents and photographs of their homes. This page says plainly how we protect them.
How we protect your data
Plain answers, no fine print.
Your data stays in India
All data is stored and processed in India, and backups are kept in India too.
Walled off at the database
Every row belongs to one business, and the database itself — not only our code — refuses to show one business's rows to another. Our tests try to read across businesses and must find nothing.
Encrypted
TLS in transit. Passwords stored only as one-way hashes. Portal and WhatsApp credentials encrypted with their own key; identity documents and site photographs with a separate one. Backups encrypted before they leave the server.
Who can see what
Roles and permissions that you control. Viewing an identity document, exporting data or overriding a credit limit each need their own permission, and every view of an identity document is recorded.
Books that cannot be quietly rewritten
Posted entries are never edited — a correction is a new, reversing entry. The audit trail is kept for at least eight years, and a nightly check proves every ledger still balances.
Backed up, and proven
Continuous backups that can restore your books to any minute in the last 14 days, losing at most 5 minutes of work. We test a restore every quarter.
AI under your own access
When AI reads a bill, only that document is sent, to providers contracted not to train on your data. AI works under the person's own access, and nothing it reads is posted until a person reviews it.
Files checked before they are kept
Every upload is scanned for malware, checked by its content, and opened only through a link that works for five minutes.
Your data is yours
Export everything — every master, document and ledger — in Excel and Tally format, whenever you want, without asking us.
Availability
Billing never waits on anyone else.
We aim for 99.5% availability every month. Planned maintenance happens outside 9 am to 9 pm and never around GST filing dates. If an outside service is slow, your invoices still post and the dependent work queues.
FAQ
Questions about security
Where is my data stored?
In India. Your data, your documents and their backups are all kept on servers in India.
Can Ordwell staff see my books?
Not as a matter of course. If support needs access, it is time-limited, needs a stated reason, and is written into your own audit trail where the owner can see it.
Is my data used to train AI?
No. AI providers are contracted on a no-training basis, only the one document being read is sent, and you can choose to use your own AI account instead.
What happens if the GST portal or WhatsApp is down?
Your billing does not stop. Invoices still post, and the work that depends on the outside service — the e-invoice, the message — waits in a queue and goes when the service is back.
How do I report a security problem?
Write to [email protected]. We will acknowledge it, keep you informed, and not pursue anyone who reports in good faith and gives us reasonable time to fix it.
Put your business in order.
Ordwell is opening to businesses in small batches. Join the waiting list, and we help you set up and bring your data in from Tally or Excel when it is your turn.
The first 100 businesses to confirm get 3 months free, while places last.