Data-security statement

Last updated: 6 September 2026 · TriAvani Law Associates LLP

24eTax is operated by TriAvani Law Associates LLP. This statement explains the safeguards used by the service and the steps you can take to protect your account and business records.

1. Connections and local storage

The website and production API use HTTPS with TLS to protect information in transit. The native mobile app uses SQLCipher for its local database and platform secure storage for its database key. Native builds support certificate pinning for configured server connections.

The web app is different: it uses browser-managed local storage, which does not have the native app’s SQLCipher database encryption. Browser protections, device security and who can access your browser profile matter. Use a trusted device, keep its operating system and browser updated, and avoid shared browser profiles for business records.

2. Account protection

The app supports mobile OTP or email/password sign-in and optional two-factor authentication. Rate limits and temporary lockouts help resist repeated sign-in attempts. Session controls allow you to sign out and revoke access. Enable two-factor authentication where available and give staff separate accounts.

3. Access control and business separation

Roles such as salesman, accountant, admin and owner determine access, with additional per-person permissions. Server checks and database row-level controls help separate business records. These controls reduce risk; they do not remove the need to review invitations and staff permissions.

4. Financial records and audit trail

Financial workflows use double-entry accounting and an append-only audit log for audited actions. Committed documents are protected from direct editing; supported cancellations and amendments preserve a record of corrections. Review the document, customer and business before finalising or filing.

5. GST connections and payments

GST portal operations use the configured GST Suvidha Provider. Authentication and filing details are processed to carry out operations you request, and selected portal payloads are archived in encrypted form. Check the filing response and acknowledgement before treating a return as filed.

Direct online payments use Razorpay’s payment pages. 24eTax receives payment references and status information. Support will not ask you for a payment PIN, full card credentials or a sign-in OTP.

6. Backup and recovery

Our infrastructure includes backup tooling and a documented restore procedure. Recovery depends on the available backup, incident and hosting configuration; this statement is not a guarantee of zero data loss or a fixed recovery time. Keep your own exports of important records. Offline work should be synced when a connection is available.

7. Privacy and your responsibilities

You can export your personal data and use business report exports, subject to your permissions. Account deletion and financial-record retention are described in the Privacy Policy, together with requests under applicable law, including the DPDP Act, 2023 as its provisions come into force.

Use a device lock, maintain backups of exports and check who has business access. A copy you download or send to another person is outside the access controls of your 24eTax account.

8. Security incidents and reports

Report suspected unauthorised access promptly using the contact details above. We assess reports, investigate incidents and take appropriate containment and recovery steps. Where notification is required by applicable law, we notify affected persons and the relevant authority.

Rajni Bhardwaj, Chief Technical Officer & Grievance Officer, is the contact for security and privacy escalations at TriAvani Law Associates LLP, 208, Second Floor, Chattarpur, New Delhi - 110074.

9. Scope of this statement

We do not display certification logos we have not earned. No software or device is completely immune to security incidents. This page describes safeguards and their scope; it does not claim independent certification or government endorsement.