Encryption — Data in Transit & at Rest
Every byte of your society's data is encrypted — both while moving across the internet and while stored on our servers.
Hight Encryption in Transit
All communication between your device and Flato servers uses TLS 1.3 — the latest and most secure transport protocol.
Hight Encryption at Rest
All data stored on our servers is encrypted using Hight Encryption — the same standard used by banks and governments worldwide.
Key Management
Encryption keys are managed separately from data, rotated regularly, and never accessible to application code directly.
Indian Servers — Your Data Never Leaves India
We made a deliberate architectural decision: all Flato infrastructure is hosted exclusively within India. No foreign servers. No data transfer across borders.
Mumbai Data Centre
Primary · Indian Cloud Infrastructure
Bengaluru Data Centre
Secondary · Indian Cloud Infrastructure
✅ Why this matters: When your data is on foreign servers, it is subject to foreign laws (like US CLOUD Act or GDPR). On Indian servers, your data is governed by Indian law, under your control, and within reach of Indian courts. No grey zones. No foreign jurisdiction over your residents' data.
Authentication & Access Control
We use multiple layers of access control to ensure only authorised people can see data — and only the data relevant to their role.
OTP Two-Factor Auth
All logins are verified by a one-time password sent to the registered mobile number. No static passwords that can be guessed or stolen.
Role-Based Access
Each user sees only what their role permits. Guards see gate logs. Treasurers see finances. Residents see their own data only.
Session Management
Inactive sessions are automatically expired. Concurrent logins from unknown devices trigger security alerts.
Immediate Revocation
When a resident or staff member leaves, their access can be revoked instantly with no residual permissions.
Security Layers — Defence in Depth
We use a layered security model — so even if one layer is compromised, multiple others protect your data.
To report a security vulnerability, please email [email protected]. We take all security reports seriously and commit to acknowledging within 48 hours.
🔐 Security is not a feature at Flato — it's the foundation. Since our founder comes from an IT security background, every architectural decision is made with security-first thinking. Your residents' data deserves nothing less.