Security Architecture & Data Governance
Paazhakoodai utilizes encrypted communication channels, isolated payment gateway integrations, and role-based access control to safeguard customer and transaction data.
TLS 1.3 & AES-256
All client-server traffic and Neon PostgreSQL database connections use TLS 1.3 in transit and AES-256 encryption at rest.
PCI-DSS Gateway
Payment transactions (UPI, Net Banking, Cards) are processed via PCI-DSS Level 1 certified gateways. Paazhakoodai does not store card numbers.
DPDP & ISO Alignment
Architected following ISO/IEC 27001 ISMS principles and in compliance with India’s Digital Personal Data Protection (DPDP) Act 2023.
Security Safeguards
Customer, Seller, Delivery Agent, and Admin roles are isolated through JWT authorization tokens and server-side route guards.
Deliveries require dynamic one-time password verification before items are handed over to customers.