Question for members: how do you manage client document collection before deadlines?

Hey Shaurya,

Before the community evaluates your tool, we need absolute clarity on compliance, security, and liability. Please address these critical questions:

• Data Privacy and Storage: Where are client documents stored in transit and at rest, and are the servers compliant with Indian data localization norms and ICAI guidelines on client confidentiality?

• Liability & Breach: If a secure link is compromised or intercepted due to a vulnerability on your free platform, who bears legal liability for the exposure of sensitive financial data, PAN cards, and bank statements?

• Monetization & Data Harvesting: If you are offering this completely free to early firms without charging anything, how is your entity sustaining server costs, and what is your exact monetization or data-handling model going forward? Will client data or metadata be analyzed, logged, or utilized to train external models?

• Control vs. Vendor Lock-in: If a firm uses your tool to collect documents and later decides to discontinue, what is the exact mechanism for exporting and purging all client data off your systems permanently?

Transparency on these fronts is non-negotiable before practicing CAs can trust an unverified third-party utility with sensitive client records.

Hey Aashok,

Thanks for the questions, these are exactly what a responsible CA should ask.

I'm a solo founder (not a CA), and I built this because firms I spoke to were drowning in scattered WhatsApp/email documents, no central record of what they've asked for or received from each client.

1) Where's the data? All traffic is encrypted. Files are stored in a private, locked cloud vault in Mumbai (India) — not publicly accessible, not visible to your competitors, and not something I can open. Every firm's data is walled off from every other firm's. I physically cannot see your clients' documents.

2) Who's liable if a link is compromised? Each link opens only that one document request and expires in 7 days. Legally, your firm stays in control of your data. I'm only the service provider. I have a plain-English DPA (see kompile.in/dpa) and I'll sign a proper agreement. If a flaw in my software causes a breach, I'll fix it fast and tell you openly but I won't pretend to carry the duties that rightly stay with you as the professional.

3) Why free? Not "lifetime free" - a free tier capped at 10 clients, so firms can try it without risk. Real firms with real client volumes need more than 10 and move to the paid plan (₹799/mo, or ₹599/mo annually). Paying firms fund the servers. I do not sell, train on, or mine your data. Ever.

4) Can you leave with your data? Yes - today, not someday. One click exports everything, deleting your account permanently wipes the files too, not just the account. No lock-in, no leftovers.

Happy to answer more and I'd genuinely welcome CAs trying to break the free tier.