Home Security & trust
Trust & security

Your business, in safe hands

Yantra runs the flows your shop depends on — payments, invoices, WhatsApp, Tally. Here is exactly how we look after your keys, your books and your data. Plain facts, nothing dressed up.

Start free Ask us anything on WhatsApp
Secrets encrypted at rest Isolated per workspace Export or delete any time
01 The short version

Six promises we can actually keep

Yantra is pre-launch and built by a small team in Pune. So trust here comes from how the product is built — not from a wall of logos or made-up numbers.

Your secrets stay secret

API keys and passwords for your connected apps are encrypted at rest, and never printed — not in a run's step history, not in an export, not in a shared report.

Your data is yours

Export every flow, run, contact and invoice whenever you like. Ask us to delete the workspace and it is gone. No lock-in, no data held hostage.

Tally stays on your PC

The Tally bridge runs on your own shop computer. Your books never get copied to our cloud — the voucher is written on your machine and stays there.

One workspace can't see another

Every workspace is walled off at the database. One customer's data can never surface inside another customer's flows, runs, dashboards or reports.

A run is never lost or doubled

Runs sit in a durable queue on disk. We load-tested 200 firing at the same moment — none were dropped, and none ran twice. A restart resumes exactly where it left off.

Proper GST invoices

Every payment you make gets a real GST invoice with your GSTIN on it — clean, itemised and ready to hand to your CA. No guesswork at year-end.

02 How your data flows

From your apps to your workspace — and out again

No detours, no shared pool, no one-way door. The path is short on purpose, and every step is one you can see for yourself.

The best security promise is being able to walk out with everything.

Your data · the whole pathYours only
1
Your connected appsRazorpay, WhatsApp, Google Sheets, Tally — the tools you already run.
2
Encrypted on the way inKeys and tokens are scrambled at rest, decrypted only for the instant a step needs them.
3
Your workspace onlyScoped at the database query — no other customer's flow can ever read it.
4
Export any timeFlows, runs, contacts and invoices in open formats — or ask us to delete the lot.
03 Connected-app secrets

Your keys never show up where they shouldn't

To automate Razorpay, WhatsApp or a Google Sheet, Yantra needs a token for each. Those tokens are the crown jewels — so they get special treatment.

  • Encrypted at rest. Stored scrambled, decrypted only for the split second a step actually uses them.
  • Masked everywhere you can see. The screen shows the last few characters only — the full value is never displayed back.
  • Stripped from run history & exports. When you look at what a step did — or download a report — the secret is replaced with •••••, never the real key.
Run #4821 · step historyRedacted
→ POST api.razorpay.com/payment_links
amount: 4999900
key_id: rzp_live_••••••••••
key_secret: [redacted]
← 200 OK · link created ✓
The real secret was used to make this call — but it is never written to the log.
04 Tally & your books

Your ledger never leaves your machine

Most tools that touch Tally ask you to upload your company data to their cloud. Yantra doesn't. The bridge runs on the same PC as Tally, on your shop's own network.

  • No cloud copy of your books. We keep the flow and the run history — the accounting data itself stays in your Tally, on your computer.
  • You are in control of the link. Close Tally or switch off the PC and the bridge simply pauses — nothing is pulled behind your back.
  • Both ways, cleanly. A UPI payment posts a receipt voucher; outstanding from Tally can trigger a reminder. Only the specific voucher moves — never the whole ledger.
Receipt Voucher · posted on your PC
Date09 Aug 2026
PartySharma Traders
ThroughUPI · Razorpay
Refpay_Q1a8••••
Amount₹49,999.00
Written locally in Tally — no upload, no cloud mirror of your company data.
05 How it holds up

Walled off, and hard to knock over

Every workspace is its own island

Data is scoped to your workspace at the query level, not just hidden in the interface. A flow you build can only read your contacts, your runs, your invoices — there is no path from one customer's account into another's, by mistake or on purpose.

Workspace A Workspace B

A durable queue that doesn't drop work

Every run is written to a queue on disk before it starts. If the server restarts mid-run, it picks the job back up from the exact step it was on — so a crash never re-sends a WhatsApp or re-charges a card, and never loses the run either.

200
fired at once, tested
0
runs lost
0
runs doubled
06 No lock-in

Take everything with you, whenever

The best security promise is being able to leave. If Yantra ever stops earning its place, you should be able to walk out with your data intact — so we made that easy on purpose.

  • Export flows, runs, contacts & invoices in open formats you can open anywhere.
  • Delete on request. Ask us to remove the workspace and it's wiped — we don't sit on data you've told us to let go of.
  • Switching in? Show your current tool's invoice and we migrate your flows across free.
Start free — 1,000 runs/mo Talk to a human
Tax Invoice · Yantra by Codelith Lab
PlanPro — monthly
Your GSTIN27ABCDE1234F1Z5
Base₹1,999.00
GST @ 18%₹359.82
Total₹2,358.82
GST on top with your GSTIN on every invoice — nothing hidden, nothing rounded away.
07 Straight answers

Security questions, answered honestly

Where does my data live?
On our server, scoped to your workspace — except your Tally books, which stay on your own shop PC. We're a Pune-based team and we keep the moving parts few and understandable rather than spread across a dozen services.
Can your team read my API keys?
The keys are encrypted at rest and only decrypted for the instant a step runs. They're never shown back on screen in full and never written into run history or exports. We built it this way precisely so that a key can't be casually read — by us or by anyone who sees a report.
What happens to a run if the server restarts mid-way?
Nothing is lost and nothing repeats. Each run checkpoints the step it's on before every action, so on restart it resumes from that exact point — a half-finished flow won't re-send a WhatsApp message or re-charge a payment it already made.
Could another customer's flow ever touch my data?
No. Isolation is enforced at the database query, not just hidden in the interface. A flow can only ever read the workspace it belongs to. There is no shared pool that one account could reach into.
Do you upload my Tally company data to the cloud?
No. The Tally bridge runs on your PC and writes vouchers there. We hold the automation and its history — not a mirror of your ledger. Turn the PC off and the link simply pauses.
How do I get my data out, or delete it?
Export your flows, runs, contacts and invoices any time from the app. Want it all gone? Message us on WhatsApp and we delete the workspace. No exit fees, no retention traps — and if you're moving in from another tool, we migrate your flows across for free.
Are you certified — SOC 2, ISO, and so on?
Not yet, and we won't pretend otherwise. Yantra is a young product from a small team. What we can show you today is exactly how it's built — encrypted secrets, isolated workspaces, a durable queue, books that stay on your PC — and a real person on WhatsApp who'll answer any question you have before you commit a single rupee.
Built to be trusted

Look under the hood before you commit

The demo needs no signup at all. Poke around, break a flow on purpose, watch how it recovers — then decide.

See the live demo Start free
Secrets encryptedKeys are scrambled at rest and never printed in history or exports.
Tally on your PCYour books stay on your machine — no cloud copy, ever.
Workspaces isolatedOne customer can never reach another's data.
Durable queue200 at once, tested — none lost, none doubled.

We're a small team, and we'd rather tell you what Yantra does not have yet than paint over it. No enterprise certifications, no customer logos to wave around — Yantra is pre-launch. What we can promise is that the way we handle your keys, your books and your data is exactly as described on this page, and that a real person answers when you write.

Have a security question we didn't cover? Message us — we'll answer it straight.

Codelith Lab · Pune, India · +91 86691 17894