● Security & trust

Neev-controlled storage.
Kept in India.

You're handing us the most sensitive thing your business owns — the truth about money, customers and stock. Here is exactly how we hold it.

Current security principles

01

India-resident production data

Neev production workloads and persistent data we control run in Google Cloud's Mumbai region. PostgreSQL data, object storage, and backups are stored in India.

Google Cloud · asia-south1
02

Protected in transit and at rest

Public traffic uses HTTPS. Persistent storage on Google Cloud uses provider-managed encryption at rest. We do not advertise custom key controls that are not deployed.

HTTPS · encrypted storage
03

Tenant- and role-scoped access

Business records are scoped to a tenant, and application access is limited by the user's assigned role. Neev does not treat one customer's workspace as shared with another.

Tenant isolation · roles
04

Production secrets stay out of source

Production credentials are not committed to the repository. They are supplied to the running k3s workloads through restricted deployment configuration.

Runtime-only secrets
05

Daily database backups

PostgreSQL backups run daily, are retained for 14 days, and are stored in India. Recovery timing depends on the incident and is not guaranteed.

Daily · 14-day retention
06

Focused operational diagnostics

The deployment exposes health and readiness checks and keeps application logs for diagnosis. These checks support routine operation but are not a complete monitoring or incident-detection system.

Health checks · application logs
● Where the data sits

One India region. Deliberate data placement.

Neev-managed production storage remains in Google Cloud's Mumbai region. Cloudflare and Meta may process traffic for delivery, so we do not describe those external services as India-only.

COMPUTE
Mumbai · asia-south1-a
Google Cloud VM and k3s
STORAGE
Mumbai · asia-south1
PostgreSQL, objects, and backups
Backups
Daily PostgreSQL backups · 14-day retention · stored in India
● Current safeguards

What is actually deployed today.

Production location

In place

Google Cloud Mumbai region (asia-south1)

Workload hosting

In place

Google Cloud VM and k3s in asia-south1-a

Persistent storage

In place

PostgreSQL and Google Cloud Storage in India

Access boundaries

In place

Tenant- and role-scoped application access

Backups

Daily

PostgreSQL backups retained for 14 days in India

Privacy programme

Evolving

Controls and notices are updated as Indian law applies

● Sub-processors

External services that are live or configured.

Google Cloud and Cloudflare support the live deployment. Meta is configured for WhatsApp delivery but not yet activated in production. Provider processing locations and policies can differ from Neev-controlled storage.

Infrastructure
Google Cloud (India)
Compute, k3s, database storage, objects, and backups
Internet delivery
Cloudflare
Routes public traffic; Cloudflare processing is not represented as India-only
WhatsApp delivery · configured
Meta (pending activation)
Configured for WhatsApp login delivery, but production activation is pending; Meta processing is not represented as India-only
● Security reporting

Tell us when something looks wrong.

For an urgent security, privacy, or legal concern, call the number shown. Share only what is needed to explain the issue; never provide passwords, OTPs, or other secrets. The report will be assessed under Neev's current procedures and applicable law.

Have a security question?

Ask us about the controls that are live today, or read how Neev handles personal data.