Production controls
| Layer | Control |
|---|---|
| Transport | Caddy terminates HTTPS and redirects HTTP; the Node service listens on loopback only. |
| Process | A dedicated unprivileged system user, systemd hardening, private temporary directory, and explicit writable paths. |
| Storage | Durable application data is confined to /var/lib/itrhelper; secrets are supplied from a root-managed environment file, not the repository. |
| Deployment | Immutable timestamped releases, pre-switch build checks, an atomic current symlink, health verification, and rollback to the previous release. |
| Edge | Security headers, request-size limits, compression, and proxying only to the loopback service. |
Data minimisation
Only records needed for the requested workpaper should be uploaded. Logs should contain operational request information, not workbook contents or extracted tax figures. Uploaded material is not used to train public or third-party AI models. Access is limited to personnel and processors needed to prepare or operate the service.
Backups and deletion
Encrypted or access-restricted backups should cover durable case state, use a documented rotation, and be tested through restoration. Deleting an active copy does not instantly remove an item from every backup; it expires as rotated backups age out. Deployment releases are separate from customer data and can be rolled back without restoring uploads.
Payment and credentials
Do not send passwords, OTPs, brokerage login credentials, card details, UPI PINs, or income-tax portal credentials. ITR FNO does not need portal access to prepare a workpaper. Payment credentials are handled by the payment provider; only payment references and status should reach the application.
Reporting a vulnerability
Email security@itrfno.com with the affected URL, reproduction steps, and impact. Do not access another person's data, degrade availability, use social engineering, or publish a vulnerability before a reasonable remediation period. We will acknowledge a credible report and coordinate next steps.
Incidents
Response priorities are containment, preservation of evidence, assessment of affected data, safe recovery, and legally required customer or authority notices. No system is invulnerable, and this page describes intended production controls rather than a warranty or independent certification.