How we keep you safe

Last updated 17-10-2026

Plain promises about your sign-in, your records and your documents in AIQ One: what we protect, how, what we never do, and how to tell us about a problem we missed.

What we protect

• Your sign-in, your business records, your family records and your documents.
• Your mobile number: it proves who you are, and we never sell it.

How we protect it

• You prove your number once on WhatsApp, then sign in with your 4-digit PIN. Wrong PINs lock the account for a while.
• My logins shows every sign-in to your account and lets you sign out all your other devices.
• Everything travels over an encrypted connection (HTTPS).
• Our apps are signed with one release key, so nobody can pass off a changed copy as an update.

Coming soon

Built and being tested; each line moves up to the list above on the day it is switched on.

• Optional 2-step codes: a 6-digit code from an authenticator app on your phone at every sign-in, with backup codes. Anyone will be able to switch it on.
• An alert for every new device that signs in to your account.
• On Android, your sign-in key kept by the phone's own key store.

What we never do

• We never ask for your PIN, your 2-step code or your backup codes: not on a call, not on WhatsApp, not by email.
• We never sell your personal data. See our Privacy Policy.

Fix log

When we fix a security finding, it is listed here with its id and date (never a recipe for the attack). No public findings yet.

Found a security problem?

Write to [email protected] with "Security" in the subject (a separate security address is coming). We reply within 3 working days. Our rules for researchers, including safe harbour and its honest limits, are in the Vulnerability Disclosure Policy. You can also report to CERT-In, India's national team, at cert-in.org.in.

The honest part

AIQ never claims it cannot be broken. AIQ holds no security certification today (no ISO 27001, no SOC 2, no CERT-In audit). What AIQ can show is: the protections on this page, the tests that prove them, the findings it fixed, and a public way to report what we missed.