Skip to content
Narada OS Help

Your data and security

Narada reads your ERP data. It never writes to your ERP. Your data is kept apart from every other client’s. Your team sees it, and our team can open it to load files and fix problems. Each answer below also says what we do not claim.

Question Short answer
Does Narada change my ERP? No. It only reads
Can another client see my data? No. It is kept apart at the database level
Where is my data? Stored in the United States, in San Francisco. Part of our team works from India
What does the AI see? Only your own figures, and only what an answer needs
Can I get my data back? Yes. Ask, and we export your business data
Can I have it deleted? Yes. Ask, we confirm, and it is gone

Does Narada change anything in my ERP?

Section titled “Does Narada change anything in my ERP?”

No. Narada only reads your ERP’s data. When it connects to Odoo, every call it makes is a read. When your ERP emails files, Narada only receives them.

What we do not claim: that a technical block would reject a write if one were ever added. The promise is that Narada never makes one.

Can another client see my data?

Section titled “Can another client see my data?”

No. Each client’s data is kept apart inside the database itself. Every table holding client data is covered automatically. A database request without your workspace attached returns nothing, never another client’s rows.

What we do not claim: physically separate databases for each client, or a separate encryption key per client.

Who can see my data?

Section titled “Who can see my data?”

Your team sees your workspace. The owner decides what each person can change. See Who can do what. Our team can also open your workspace, to load files and fix problems.

Files your ERP emails to Narada are only accepted if they pass the standard sender checks, and come from the email domain that first delivered for your workspace. They go straight into the system, not into a personal mailbox.

Where is my data stored?

Section titled “Where is my data stored?”

In the United States. The app and the database run in San Francisco, on Railway. Railway holds an independent SOC 2 Type II report.

What we do not claim: that nobody outside the US ever accesses it. Part of our team works remotely from India.

What does the AI see?

Section titled “What does the AI see?”

When a file is first loaded, the AI sees its column headings and the first 5 rows, to match your columns. After that, it sees only the figures a question needs, from your own workspace. It never sees another client’s data, your ERP password or your login details.

The AI only states money figures that Narada’s own calculations produced. A check reads every answer. If it finds a money figure no calculation produced, the answer is replaced by a plain, checked summary. Nothing the AI suggests happens until a person approves it.

The AI provider is Anthropic. Anthropic states it does not train on this data and deletes it within 30 days. What we do not claim: zero retention. Anthropic keeps flagged content for up to 2 years.

Can I get my data back, or have it deleted?

Section titled “Can I get my data back, or have it deleted?”

Yes, both. Email support@naradaos.com.

  • Export: we send you your business data as CSV files: products, customers, suppliers, branches, sales, stock, purchase orders, receipts, returns, receivables and batches, plus your findings and the record of what Narada counted as banked.
  • Delete: we confirm with you, then delete every business record in your workspace. It cannot be undone. Stored copies of your uploaded files can take up to 30 days to clear.

What we do not claim: a self-serve button for either. A person on our team runs it for you.

Can order history be changed quietly?

Section titled “Can order history be changed quietly?”

No. Every purchase order created, edited or deleted, and every decision on the Orders desk, is recorded with who did it. The app cannot edit or delete those records. What we do not claim: protection against someone with direct control of the database, or that the record survives deleting your whole workspace.

How is payment handled?

Section titled “How is payment handled?”

Checkout runs through Dodo Payments, the merchant of record. Your card never touches Narada’s servers.

Questions your IT team will ask

Section titled “Questions your IT team will ask”
Question Answer
How do people sign in? Email and password, or Google sign-in. No company single sign-on (SSO) or two-factor sign-in yet
Is data encrypted in transit? Yes. Every connection uses HTTPS
Is data encrypted at rest? Our host, Railway, states its storage is encrypted at rest. We have not verified it ourselves
Backups? Railway’s point-in-time backups, kept for a limited window. Deleted data leaves the backups as they expire
Will you tell us about a breach? Yes. Without undue delay, and within 72 hours where feasible. See the terms below
Does Narada have its own SOC 2? No. Railway, our host, holds a SOC 2 Type II report
Who else handles our data? Railway (hosting), Anthropic (the AI), Dodo Payments (billing). The full list is in the terms below

More detail

Section titled “More detail”