Security

Security you can understand

Here is what Zaptiz actually does to protect your account, your records and your payments — stated plainly, without certification badges we don’t hold.

  • Strong sign-in

    Email verification codes at sign-up, sign-in alerts on every login, account lockout after repeated failures, and sign-in with Google or Zoho.

  • Two-factor authentication

    Authenticator-app (TOTP) codes with backup codes on both products, with lockout after repeated wrong codes.

  • Secure sessions

    HttpOnly, Secure cookies instead of tokens in the browser, short-lived access with refresh, and one active session per user — a new login signs out the old one.

  • Role-based access

    Every API endpoint checks the user’s role. Construction adds project-team access, financial visibility per member and maker-checker rules.

  • Company data isolation

    Every query is scoped to your company. Zaptiz Construction runs on its own database, separate from Zaptiz Electrical.

  • Protected APIs

    Rate limits on sign-in, AI and payment endpoints, IP blocking, and a prompt firewall that screens every AI request.

  • Payment safety

    Payments run on your own Razorpay or Stripe account. Gateway secrets are encrypted, webhooks are signature-verified and replays are rejected.

  • Audit trail

    Security, user and payment events are logged; Construction keeps an append-only audit trail for every change and asks for reasons on sensitive actions.

  • Cloud infrastructure

    Hosted on Microsoft Azure in Central India over TLS, with private file storage, time-limited download links and nightly database backups.

Shared responsibility

Your part matters too

  • 01Turn on two-factor authentication for every user — especially admins.
  • 02Give people the narrowest role that lets them do their job.
  • 03Remove or deactivate users as soon as they leave.
  • 04Connect payment gateways, Brevo and WhatsApp with keys used only for Zaptiz.
  • 05Review AI drafts before confirming them, just as you would a colleague’s work.

Report a security issue

If you believe you have found a vulnerability in Zaptiz, please report it privately so we can fix it before it is disclosed. Include steps to reproduce and any relevant URLs.

support@zaptiz.com

For data-protection requests — access, correction or deletion — write to privacy@zaptiz.com. See our Privacy Policy.

Ready to modernise your business?

Whether you build electrical panels or deliver construction projects, Zaptiz brings your operations together on one platform.

Book a demo Contact us Explore products