Privacy-First Audit Architecture
CAs deal with sensitive corporate finance records. Our security protocol is built on a simple premise: **if data doesn't leave your computer, it cannot be leaked.**
100% Local Ingestion
All client ledgers, voucher structures, and tax codes stay inside your local workspace. The software functions without sending data packets online, making it fully NDA compliant.
No External Cloud Storage
There is no cloud database or external sync engine. Audit records are written strictly to an isolated local SQLite file inside your operating system app data directory.
Complete Data Control
Your firm owns the raw databases, temporary caches, and final reports. You decide when to generate spreadsheets, where to store them, and who has physical access.
Secured Cryptographic Keys
Software validation utilizes hardware-locked machine identification (HMAC-SHA256 signatures) checked inside our secure offline client, keeping execution paths verified.
How Local Data Isolation Works
Ingest Raw Tally Export
Tally XML files are exported manually. The desktop application loads them directly from your local downloads folder.
Local SQLite Transformation
FastAPI background worker processes the files in blocks of 1,000 to compile records inside the local SQLite database.
Generate Offline Exception Sheets
Reports (MSME disallowances, Rule 37 audits) are generated on local memory and saved directly as offline spreadsheets.
# Verifying internet sockets during audit processing...
[INFO] Audit Engine Triggered: Run msme_engine.py
[INFO] Port Scanner check: Outbound TCP sockets = 0 active
[SUCCESS] Execution verified 100% offline. Zero bytes sent.
Security & Privacy FAQs
Does CAControl send client financial data back to your servers?
No. Absolutely zero financial data, ledger balances, or client names are transmitted back to our servers. The application runs entirely on your local machine.
How does the software validate licenses without internet access?
CAControl uses a cryptographic hardware-binding mechanism. During activation, the software reads your machine signature and matches it locally against the generated license key signature using HMAC checks. No active internet ping is required to verify validity once activated.
Where is the SQLite database stored on my computer?
The SQLite file is initialized locally in your OS user profile application data directory (e.g., %APPDATA%/AuditSuite on Windows). This database is self-contained and can be backed up or wiped manually at any time.
How does the software handle Tally connection?
The software reads standard static XML files exported directly from your local Tally installation, or connects via a local port (e.g., localhost:9000). The data transmission remains completely inside your local loopback network and never leaves your computer.