Security built into the foundation.
We believe financial privacy is a fundamental right. Discover how AavakJavak protects your data with client-side encryption and tenant isolation.
Technically verified security capabilities
Every security guarantee listed below is implemented directly in the production codebase.
AES-256 GCM Client Encryption
All sensitive user data (PAN, Aadhaar, document attachments) is encrypted client-side using AES-256 GCM before being stored locally in SQLite or synced to the backend.
PostgreSQL Row-Level Security (RLS)
Database tenant isolation is strictly enforced via PostgreSQL Row-Level Security (RLS) policies. No user or tenant can query another tenant's financial records.
100% Offline-First SQLite Engine
All core ledger transactions, budgets, and goal jars operate on a local SQLite database engine on your device. Internet access is only required for optional cloud sync.
Biometric & PIN Vault Protection
Device-level biometric authentication (Fingerprint, Biometric unlock, App PIN) protects encrypted document vaults and sensitive transaction feeds.
Zero-Knowledge Key Derivation
Master encryption keys are generated locally on device using PBKDF2/Argon2 key derivation. Your master passphrase never leaves your hardware.
Private Multi-Device Cloud Backup
Encrypted cloud synchronization ensures your data is only readable on your verified, authenticated personal devices.
Take ownership of your financial data
Experience true offline-first security with zero-knowledge encryption.