Compliance & security
Indian rules, enforced. Your data, isolated.
TRAI’s enquiry window, DLT, DND, quiet hours, the WhatsApp 24-hour window, DPDP and RERA built into how PropZolo sends and stores — on a platform with tenant isolation, encryption and audit trails.
Included on every plan. See pricing
- 01
Checked at send time
The messaging engine refuses what the rules forbid.
- 02
DPDP-ready
Consent ledger, notices, rights requests and erasure.
- 03
Isolated by design
Row-level security on every tenant table.
Compliance & security
TRAI and DLT
Promotional SMS and calls to an enquiry are allowed for seven days, then only with registered consent. DLT entities, headers and templates are checked before every SMS.
- Enquiry evidence kept with each lead
- DND scrubbing and quiet hours
- A2P declarations before software dialling
Compliance & security
DPDP
Consent captured with versioned notices in 13 languages, a consent ledger with proof, rights requests verified by OTP with a 90-day clock, and erasure that cascades.
- Retention policies and legal holds
- Access reports for data principals
- Nominations and grievance handling
Compliance & security
Anti-leak controls
Phone numbers masked by role with audited reveals and quotas, device binding, login approvals, export rules with approvals and watermarks, and a staff-exit wizard.
- Bulk-export and bulk-reveal alerts
- Login-hour windows
- Watermarked exports
Compliance & security
Platform security
Postgres row-level security on every tenant table, envelope-encrypted secrets, mandatory two-factor sign-in for owners and admins, an append-only audit log and point-in-time backups.
- Separate admin realm with no access to lead data
- Rate limits and step-up sign-in
- Full data export at any time
Questions
Compliance & security, answered.
Is PropZolo the data fiduciary under DPDP?
Your company is the data fiduciary for your leads and contacts; PropZolo is your data processor and provides the tools — consent, notices, rights requests, retention and erasure — to meet your obligations.
Where is data stored?
Application and database servers run in India (Mumbai). Sub-processors such as Meta for WhatsApp are listed in the privacy policy.