Your khata is your business. Here is exactly who can see it.
Most mandi ledgers live on one office computer with no backup. A stolen laptop, a failed disk or one monsoon ends thirty years of records. This page explains what MandiGrow actually does instead — and what we deliberately do not claim.
Your data is isolated per mandi
Every record — party, lot, bill, ledger entry, rate — carries an organisation ID, and every query is scoped to the organisation of the signed-in user. The isolation sits at the data layer, not in the interface. There is no screen, report or export that can return another mandi's balances, because the query cannot express it.
This matters in a trade where your competitor two shops down may use the same software. Your buyer list, your rates and your outstanding balances are commercially sensitive, and they are the first thing a rival would want to see.
Eight roles, enforced by permission
Hiding a menu item is not access control. In MandiGrow sensitive areas are gated by named permissions checked on the route itself, so a user without the permission cannot reach the page by typing the URL.
view_financialsParty balances, day book, P&L, bank and cash
conduct_salesAuction, sale entry, bulk lot sale
manage_settingsRates, charge heads, users, organisation config
The practical version: a gate operator entering arrivals at 4 a.m. cannot open your party balances. A munshi raising bills cannot change your commission rates. That is the separation most paper-based mandis have never been able to enforce at all.
Support cannot look at your books silently
When support needs to see what you are seeing, they impersonate your account — and impersonation is audited. For the whole session a red banner stays on screen:
There is no quiet back door. Access is visible while it happens and recorded afterwards, and tenant-level audit reporting covers the activity in your account.
How the connection is protected
| Control | What it stops |
|---|---|
| HSTS, preloaded | Traffic being downgraded to unencrypted HTTP, even on the very first visit |
| Content Security Policy | Injected scripts running on a page — the usual route to stealing a session |
| X-Frame-Options | Your dashboard being framed inside a lookalike site to capture clicks |
| X-Content-Type-Options | A file being reinterpreted by the browser as something executable |
| Referrer-Policy | Your internal URLs leaking to third-party sites you click through to |
These are response headers, so you do not have to take our word for it — they are visible to anyone inspecting the site.
Your books are yours
You can export bills, ledgers, party master and reports in machine-readable formats at any time, without asking support for permission. If you cancel, your data stays accessible and exportable for 30 days before secure deletion.
We think this is the part that should decide the purchase. Software that makes your ledger hard to leave with is not protecting your data — it is protecting its own renewal. Read the Privacy Policy and the Terms before you decide.
What we do not claim
Security pages in this category tend to list certifications and guarantees without linking evidence. We would rather be short and checkable.
- No uptime SLA is promised on this page. If you need a contractual availability commitment, ask sales and get it in writing rather than inferring it from marketing copy.
- Compliance certifications are only worth what their attestation report shows. If a certification matters to your decision, ask any vendor — including us — for the report itself, not the badge.
- No software prevents an authorised user making a bad entry. Access control limits who can act; audit trails tell you who did. Neither replaces reconciliation.
Frequently asked questions
Is my mandi data safe on cloud software?
Cloud storage is materially safer than the alternative most mandis run today, which is a single office computer with no backup. A stolen laptop, a failed hard disk or a flood destroys a local ledger permanently. MandiGrow keeps each organisation's data isolated on managed infrastructure with automated backups, and every page is served over HSTS-preloaded TLS so traffic cannot be downgraded to plain HTTP.
Can another mandi see my data?
No. Every record in MandiGrow carries an organisation ID, and every query is scoped to the organisation of the signed-in user. Isolation is enforced at the data layer rather than hidden in the interface, so there is no view or report that can return another mandi's parties, lots, rates or balances.
Can I control what my staff can see?
Yes. MandiGrow ships eight distinct roles, and sensitive areas are gated by named permissions rather than by hiding menu items. Financial pages require view_financials, settings require manage_settings, auction and sale entry require conduct_sales. A gate operator entering arrivals cannot open your party balances or your P&L.
Can MandiGrow staff look at my data?
Support access requires explicit impersonation, and impersonation is audited. While a support session is active a persistent banner is displayed reading "SAFE MODE: You are impersonating a tenant. All actions are audited." Support cannot silently view a tenant — the access is visible and recorded.
What happens to my data if I stop paying?
Your data remains accessible and exportable for 30 days after cancellation. You can export everything — bills, ledgers, party master and reports — in machine-readable format during that window. After 30 days it is securely deleted in line with the Privacy Policy.
Can I export my own data?
Yes, at any time and without asking support. Bills, ledgers, party master and reports export in machine-readable formats. Your books are yours; a mandi ERP that holds your ledger hostage is a business risk, not a feature.
What happens if the internet goes down at the mandi?
The MandiGrow mobile app works offline. Arrivals, lots and bills can be entered without connectivity and sync automatically when the connection returns. This matters because mandi trading peaks early in the morning, often in locations with poor mobile data.
See it on your own data first
14 days free, no card. Set up your roles, run a week of real pattis, and export the lot before you decide anything.