Nootus.CA
Enterprise-grade security for CA firms

DPDP-aligned. Azure-secured. Encrypted. Audited. Protected.

Nootus.CA is built as a secure operating system for CA firms, ensuring that every client's financial, tax and identity data is protected with industry-leading security standards, data protection, encryption, audit trails and regulatory alignment.

DPDP ActAzureAES-256TLS 1.2+reCAPTCHA
Data protection

Built to comply with India's DPDP Act, 2023.

Nootus.CA is engineered to meet the expectations of CA firms handling sensitive financial data.

Data minimization

Only the data required for compliance workflows is collected and processed.

Purpose limitation

Data is used strictly for Income Tax, TDS, GST, Books, Payroll and compliance workflows. No secondary usage, no profiling, no advertising.

Consent & transparency

Clients and staff know what data is collected, why it's collected, how it's used, and how long it's retained.

Data localization

All data is stored within India-based Azure regions.

Encryption

End-to-end encryption across every layer.

Data in transit

  • TLS 1.2+
  • Azure Front Door
  • Azure Application Gateway (WAF)

Data at rest

  • AES-256 encryption
  • Secure Azure storage
  • Managed keys

Document & API security

  • Version-controlled uploads
  • Token-based authentication
  • Rate limiting & secure headers
Audit trails

Every action is logged. Every change is traceable.

User activity logs
  • Logins
  • Document uploads
  • Draft approvals
  • Filing actions
  • Notice responses
AI agent logs
  • Draft generation
  • Data extraction
  • Reconciliation actions
  • Error detection
Compliance & security logs
  • Filing timestamps
  • Version history
  • Access attempts
  • Permission changes
Regulatory alignment

Aligned with India's compliance and security expectations.

DPDP Act (India)

Data protection, consent, purpose limitation, data minimization, secure processing.

IT Act & CERT-In guidelines

Secure authentication, incident reporting readiness, log retention, access control.

Azure cloud compliance

Front Door, Application Gateway, Security Center and Key Vault.

Bot & abuse protection

Google reCAPTCHA on login, uploads, forms and client portals.

This protects against bots, credential stuffing and automated attacks, built to meet the security expectations of CA firms handling sensitive financial and identity data.

Security, Compliance and Trust Built Into the Core

Want the technical deep dive? Read our full security architecture.

DPDP Act · CERT-In · Microsoft Azure India regions