Trust Center
Bank-grade tenant isolation, end-to-end encryption, automated daily backups and sub-second edge routing across India — so your FMCG business data is always safe, always available and always yours.
In short
OperLete is hosted on Amazon Web Services (AWS) in the Asia-Pacific region (ap-southeast-1) and delivered through Cloudflare's edge network with local points of presence across India. Customer data is isolated per organization using PostgreSQL Row Level Security, encrypted with TLS 1.2/1.3 in transit and AES-256 at rest, backed up daily with point-in-time recovery, and remains 100% owned by the customer with on-demand CSV/Excel export at any time.
Compliance at a glance
The exact infrastructure, isolation, encryption and privacy commitments behind OperLete — so IT, procurement and compliance teams can verify each point directly.
Architecture
No fragile on-premise servers, no hardware to maintain. OperLete runs entirely on top-tier global cloud providers, with security enforced at every layer.
OperLete's database, authentication, file storage and background processing run on managed Amazon Web Services (AWS) infrastructure in the Asia-Pacific region (ap-southeast-1) — high-tier facilities with 24/7 physical security, redundant power and cooling.
All web and mobile traffic passes through Cloudflare's enterprise edge network, which handles SSL/TLS termination, DDoS mitigation (Layers 3, 4 and 7) and a Web Application Firewall (WAF). Indian users connect through local points of presence for sub-second response times, even on field mobile networks.
OperLete is a multi-tenant platform where isolation is enforced inside the database engine itself using PostgreSQL Row Level Security (RLS) — not just in application code. Every query is filtered by your organization ID at the database layer, so no other company can ever read your pricing, stock, margins, ledgers or customer lists.
All communication between the web portal, the Android Rep App, the distributor portal and our servers is encrypted with modern HTTPS (TLS 1.2/1.3). Database volumes, automated backups and stored documents are encrypted at rest using industry-standard AES-256 encryption.
Your workspace is protected by continuous automated backups and snapshots with point-in-time recovery, redundant disk mirroring and isolated network architecture — so a hardware fault or accidental deletion never becomes a business loss.
Every screen and transaction is governed by fine-grained, least-privilege permissions. Organization owners keep full administrative authority over roles such as Owner, Admin, Manager, Rep, Dispatcher and Distributor — and every critical action is written to a tamper-evident audit log.
GPS tracking in the Rep App runs strictly between Start Day and End Day — never after hours. Mock-location detection, device health logging and optional server-side face verification keep attendance honest, while duty-hours-only tracking respects your team's privacy.
Every customer retains 100% ownership of their business data. You can export master data, inventory logs, orders, invoices and ledgers to CSV/Excel at any time — before, during or after your subscription. Your private trade data is never sold, shared with advertisers or used to train public AI models.
Data governance
We treat your trade data the way your business does: confidential, owned by you, and never monetized. Our practices are aligned with India's Digital Personal Data Protection Act, 2023.
Your organization owns its data outright. OperLete processes it only to provide the service, under data processing terms you can request at any time.
Our data practices are aligned with India's Digital Personal Data Protection Act, 2023 — including purpose limitation, grievance handling and consent-based processing of personal information.
Field location is captured only while a rep is on duty (Start Day to End Day). Managers see workday routes; nobody is tracked after hours.
Found a security concern? Write to connect@operlete.com with the details. We investigate every report and respond promptly.
Security FAQ
Send it to our team and we'll respond with infrastructure, encryption, backup and compliance details — usually within one working day.
