Before you put a practice's worth of client records into any platform, you're right to ask where the data sits, who can see it, and what happens if you ever need to leave. Here is the complete, factual answer — no vague reassurances, and nothing claimed here that isn't actually built.
The application and database run on an India-based hosting node. Client data does not leave India as part of normal operation.
All traffic runs over HTTPS/TLS. Data at rest — including backups — is encrypted at the infrastructure level.
Every practice is a separate organisation in the database. Every single query is scoped to that organisation in code — not just enforced at login, but re-checked on every request.
Every create, update, and delete is written to an audit trail — who did what, when, to which record. Exportable by date range for a compliance review or a SEBI inspection.
PAN, phone, and email are masked by default in list views. Viewing the unmasked value is itself a logged, auditable action — not a silent bypass.
Full database backups run on a schedule with no manual step required, in addition to the export tools below.
What we don't claim: field-level or end-to-end encryption on individual database columns. Encryption today is infrastructure-level (transit + at rest) — real, but not the same claim, and we won't blur that line.
A fair question for any young company: what happens to five years of client records if the vendor folds, gets acquired, or you simply switch tools? The honest answer starts with how the product is built, not a promise.
Holdings, transactions, goals, and client records export to CSV/XLSX directly from the product — not a support ticket, not a special request. Client PDF reports export independently of the app entirely.
Exports are plain spreadsheets and PDFs a CA, a successor advisor, or another platform can open and use immediately — never a proprietary file only Mandala can read back.
You can verify this today: export your own practice's data right now, on the free trial, before a single client goes in. If it isn't a genuinely usable copy, that's worth knowing before you rely on the platform — not after.
Mandala is not a SEBI-registered investment adviser or a distribution platform. You remain the registered RIA or ARN holder; the platform is execution-agnostic — it never routes orders, never takes trail, never sees your commissions. It exists to help you do the work and keep the records SEBI already expects you to keep.
We'll show you the platform and set up your practice — usually within 24 hours.
We'll be in touch within 24 hours at the email you provided.
Questions in the meantime? hello@mandalafolio.in