🔒 100% Cryptographic Multi-Tenant Isolation

Your Trust Data is Sacred, Encrypted, and 100% Private

In religious institutions, donor identities, pledge amounts, and trust balances are sacred matters of devotion and trust. We guarantee your data is strictly inaccessible to any other institution.

Multi-Tenant Architecture

Strict Merchant Data Segregation: How It Works

Unlike ordinary multi-user software where accounts share lists and tables, Arham One implements hardened database-level tenant isolation:

✓
Zero Cross-Tenant Querying: Every SQL transaction, search index, and aggregation is cryptographically bound to your trust's unique merchant ID.
✓
Protected Counter & Receipt URLs: Even if a user tampers with receipt IDs or URL parameters, our server cryptographically verifies tenant ownership before serving data.
✓
Independent Numbering Sequences: Your trust maintains its own custom invoice prefix (e.g. SHREE-2026-) and starting series without collision.
🛡️ Multi-Tenant Isolation Matrix
Security Layer Arham One Standard
Data Isolation 100% Tenant Scoped
Password Hashing Bcrypt (PHP PASSWORD_DEFAULT)
Session Security Session Token Rotation + HttpOnly
Tax Compliance Section 269ST Auto-Split
Data Portability Instant 1-Click Excel / PDF Export
Internal Governance

Role-Based Access for Staff & Volunteers

Maintain complete control over who can view financials, issue receipts, or edit devotee records.

Full Authority
Super Admin (Lead Trustee)

Full view of accounts, bank balances, daybooks, user rights management, and receipt template customization.

Counter Staff
Donation Cashier / Pujari

Permission restricted solely to taking donations and issuing receipts. Zero access to overall bank balances or confidential trustee files.

Audit Mode
Auditor / CA

Read-only export access to financial Daybooks, Section 269ST cash registries, and Profit & Loss statements.