Trust & Security
This page is maintained by Manipal Business Solutions to answer common security and privacy questions about the KYC Appointment Scheduler. It describes controls currently enabled in the application and is editable project content — not an independent certification or third-party audit.
Access requires an authenticated session. Operator roles (admin, ops_manager, and others) are enforced server-side through role-based access control and database row-level security.
Privileged fields on user profiles (role, status, email, identity) cannot be changed by non-admin users, enforced by database triggers in addition to access policies.
Customer data is stored in a managed Postgres database with encryption at rest (AES-256-GCM) and TLS in transit. Personally identifiable information is redacted before being sent to third-party AI providers.
Row-level security policies restrict reads and writes to the roles that need them.
The application integrates with WhatsApp Business (messaging), an outbound voice provider (fallback calling), and OpenAI (intent classification and short auto-responses). Operator communications occur only with consenting leads.
Lead and conversation records are retained for the period required by the operating bank partner. Deletion and data-subject requests are handled by Manipal Business Solutions on request via the contact below.
To report a security concern or submit a privacy request, contact Manipal Business Solutions through your account representative. We will acknowledge security reports promptly and investigate confirmed issues.