Security and trust
Your records, under your control
Each commitment is backed by a policy you can read.
- A login for each person
- Approval before anything goes out
- Each business kept apart
- Encrypted on the way and at rest
- Not used to train AI
- Built for Indian law
What this solves
A business system holds the most sensitive data a company has
Customer lists, prices, salaries, bank details and GST data. In shared spreadsheets and old desktop software, anyone with the file can copy it, and nobody knows who changed what.
MatruOS keeps each business's data separate, encrypts it, signs every person in with their own login and role, records every change, and lets the AI team act only within the permissions and limits you set.
You decide who sees and changes what, you can show an auditor exactly who did what and when, and your data can be exported at any time on every plan.
Commitments
How your data is kept, and who can act on it
How it works
What happens when the AI team wants to act
The same path for every AI team member and for Muni, on every plan.
- It reads only what its role allowsEach member works with the permissions you gave it, like a member of staff.
- It prepares the workA reminder, a purchase order, a GST check or a reply, drafted from your own records.
- A person approvesAnything that sends, pays, signs, files or deletes waits for an approval from someone allowed to give it.
- Every step is recordedWho prepared it, who approved it and when, in the activity log you and your auditor can read.
Questions people ask about data
Where is my data held?
MatruOS runs on servers in the United States: the application on Vercel and the database on Neon, both in Ohio. The privacy notice and the Sub-processors page name every provider and where it works, and customers are told at least 30 days before a provider is added or replaced. Each business's records are kept apart from every other business's and stored encrypted.
Can MatruOS staff see my records?
Only with your consent, given inside MatruOS by an owner or admin. Even then, some things are never allowed, such as bank details, exports, approving AI actions or messaging your customers. The Data processing addendum sets this out.
What happens to my data if I leave?
You can export all your data at any time, and for 30 days after your account ends. After that it is deleted from live systems within a further 30 days, and backup copies expire within 90 days.
Which audits has MatruOS passed?
No certification is claimed. MatruOS is built to the controls of ISO 27001 and SOC 2 and is DPDP-ready, and will say so when an audit is passed.
Read the commitments
The policies behind this page
- Data processing addendum
- Sub-processors and where they are
- Privacy notice
- How MatruOS uses AI
- Grievance Officer and complaints
- Acceptable use policy
Found a security problem? Write to consulting@codecolonies.com with the subject "Security". We reply to every report.
Run the whole business on one system Set up for your trade.
Describe your business once. MatruOS sets up your apps, brings in your data and puts Muni and the AI team to work, with your approval on every step that matters. 7-day free trial, no card needed.
See plans and what each includes