Security you can audit
Every figure is traceable, every change has a name on it, and each organisation's records stay its own.
- Anita (lead) made Dr. Menon a veterinarian
- Reviewing office opened the Ward 14 package
- Anita (lead) removed a field volunteer's access
- Ravi (field) uploaded 3 evidence photos · private
- Import Kind Hour register · labelled historical
What we do not claim yet
Security claims are only useful if they are true. These are the ones we will not make until they are.
No certifications
StrayPaw holds no ISO 27001, SOC 2 or government empanelment today. We will say so in any procurement.
No India data residency guarantee
Our database is not hosted in an Indian region today. Ask us if your contract requires it.
No external audit yet
Controls are reviewed by the team that builds them. An independent review will be published when done.
Controls in the product today
Permissions in the database
Row-level security decides every read and write by organisation and role. Hiding a button is never the guard.
Organisation isolation
Each organisation's records are readable only by its own members. In pilots, a reviewer sees only the packages submitted to their office.
Invitation-only access
No self-chosen roles. An admin invites each member with their email and a one-time code.
Audit history
Status changes, notes, follow-ups and reviews are kept on the record with who did them and when.
Provenance
Imported, community-reported and operator-created records are labelled and never mixed up.
AI with your permissions
Kaju reads with the signed-in person's session and cannot save anything without their confirmation.
Privacy by default
Public views show areas, not exact locations. Reporter identity and veterinary notes stay private.
Exportable
Your registers, evidence and reports export to XLSX, CSV and PDF at any time.
Hosting
Managed Postgres on Supabase and the app on Vercel, both over TLS.
Ask us anything about how records are kept.
Bring last month's register. We'll show you what Kaju does with it.