Security & Trust · For Enterprise

We Take Your Data Seriously.

A written account of exactly how GROWBZ protects your business — the architecture, the controls, the compliance roadmap, and the answers your security team will ask for.

Download Security Whitepaper Talk to Our Security Team

Defence in Depth

Four layers between the internet and your data

Network Security

Application Security

Data Security

Your
Business Data

Network Security

TLS 1.2+ Rate limiting DDoS protection

Application Security

JWT auth Role-based access 40+ permissions

Data Security

Row-level isolation Encryption at rest Automatic backups

Your Business Data

Clients Quotes & invoices Revenue

The Detail

Every control, spelled out

Authentication

Proving who you are

JWT + refresh tokens. Short-lived access tokens rotated silently in the background.

Google OAuth SSO. Sign in with your Google Workspace identity — no extra password.

Bcrypt password hashing. Passwords are salted and hashed; we never store them in the clear.

Session controls. Revoke a device or force logout across your whole team instantly.

Authorization

Controlling what you can do

6 role levels. Owner, Manager, Sales, Kitchen, Accounts and Viewer.

40+ granular permissions. Toggle view / edit / export / delete per module.

Row-level isolation. Enforced at the database — no query can cross tenants.

Full audit trail. Every action timestamped and attributed to a user.

Infrastructure

Where it all runs

HTTPS / TLS everywhere. All traffic encrypted in transit, end to end.

Encryption at rest. Databases and backups encrypted with managed keys.

Automatic backups. Continuous point-in-time recovery, tested regularly.

Rate limiting & WAF. Abuse and brute-force traffic blocked at the edge.

Payments

Handling money safely

Stripe PCI DSS Level 1. The highest tier of payment-card security certification.

No card data on our servers. Card details are tokenised by Stripe, never stored by us.

GST-compliant records. Every transaction logged for clean, auditable accounting.

3D Secure support. Additional bank-level verification on eligible cards.

Compliance Roadmap

Certified where it counts, transparent about the rest

ISO 27001

In Progress

GDPR Ready

Ready

India DPDP Act Ready

Ready

AWS Mumbai Region

Q4 2026

Straight Answers

Security FAQ

Your data is stored on secured infrastructure with encryption at rest and in transit. Data resides on Indian infrastructure today, and the dedicated AWS Mumbai region rollout is scheduled for Q4 2026 for full in-country residency.

Have a question we didn't answer?

Our security team will walk your team through the architecture, sign your DPA, and answer every question on your checklist.

Contact Security Book a Demo