How Kritvia keeps your business safe
Kritvia's agents draft; you decide. Nothing is sent, paid or changed outside Kritvia without your approval, and every business you run is sealed off from every other one.
Nothing goes out without you
- Emails, calendar invites and other outgoing actions wait in your Inbox for approval. You can edit before approving.
- An agent can earn the right to act alone on one specific action only after a long run of approvals without edits, and only on paid plans. You can take that right back at any time.
- Prices in proposals come from your rate card, computed by code, never invented by an AI model.
Each business is sealed off
- Every record carries its business and organisation, and the database itself (PostgreSQL row-level security) refuses to show it to anyone without access. A bug in our application code cannot leak one business's data to another.
- Sensitive records (for example loan applicants' documents) are visible only to the roles that need them.
Encryption
- All traffic is encrypted in transit (TLS through Cloudflare). The server has no open inbound ports.
- Documents, email bodies and connector tokens are encrypted at rest with a separate key per business (envelope encryption).
- Nightly backups are encrypted before they leave the server; the decryption key is held offline.
- Your data is stored in India (Amazon Web Services, Mumbai). Kritvia uses no advertising or analytics trackers.
Where AI models run
- Sensitive data (identity documents, bank statements, anything marked sensitive) is processed only by a model running on Kritvia's own server. This rule is enforced in code for every request.
- Emails and WhatsApp messages that contain an Aadhaar, PAN, passport, bank-account or card number are treated the same way. Aadhaar and card numbers are also masked, keeping only the last four digits, when documents are stored.
- Other requests may use hosted models (Groq, Google Gemini) on terms under which the provider does not train on your data. Search indexes and text recognition always run on our own server.
- Calculation jobs such as forecasts run in an isolated sandbox (gVisor) with no network access.
A record of everything
- Every change, approval and agent action is written to a tamper-evident audit log (each entry is hash-chained to the previous one). Owners can verify the chain from the Audit log page.
Your rights
- Download your data or delete your account from Your account at any time. See the Privacy policy.
Report a problem
Found a security issue? Email [email protected] with "Security" in the subject. We reply within two business days and do not take action against good-faith research.