Data Protection, Security & Legal Transparency

Enterprise cloud safeguards, automated twice-daily offsite snapshots, and statutory compliance under the Information Technology Act 2000 & Cooperative Societies Acts.

Twice-Daily Offsite Backups

Compressed .tar.gz SHA-256 verified snapshots at 00:00 & 12:00 UTC to offsite cloud vaults.

256-Bit Bank-Grade TLS

End-to-end encryption for member data, biometric WebAuthn keys, and financial vouchers.

Tenant-Isolated Vaults

Every ECCS society can download or email their isolated KYC & ledger vault on demand.

Audit Trail & Maker-Checker

Immutable transaction ledgers and multi-tier verification preventing unauthorized entries.

Official Public Disclosure & Terms of Security

Effective Date: 2026-2027 Operating Year • Published by Buy Buy Biz / SAMABAY ONLINE
1. Automated Redundant Disaster Recovery Architecture

To safeguard the high volume of live member savings, loan amortizations, and daily cash transactions recorded across our cooperative network, SAMABAY ONLINE executes an automated, compressed, SHA-256 verified full database snapshot twice every 24 hours (Midnight 00:00 & Midday 12:00 UTC/IST).

Offsite Redundancy Protocol: All backup snapshots (packaged as .sql.tar.gz with complete structural schemas, stored procedures, triggers, and live financial transactions) are automatically encrypted and dispatched offsite to our dedicated redundant cloud archive repository.
2. Data Security, Cryptographic Safeguards & Cloud Sovereignty

All network sessions, web interfaces, and API endpoints are secured using TLS 1.3 / 256-bit SSL encryption. Passwords and credentials are encrypted using industry-standard bcrypt hashing with individualized cryptographic salts. Biometric credentials utilize FIDO2/WebAuthn public-key standards where private keys never leave the user's physical device.

3. Society Management & Statutory Cooperative Audit Responsibilities

While SAMABAY ONLINE provides robust enterprise-grade cloud automation and disaster recovery backups, individual Cooperative Credit Societies (ECCS) are autonomous statutory financial entities. Under applicable State Cooperative Societies Acts and Registrar directives:

  • Society administrators and managing committees are required to conduct regular monthly day-book reconciliations and print/archive verified balance sheets.
  • Each society is equipped with an on-demand Society Data Vault export utility allowing administrators to download or email an offline snapshot of their KYC members, loans, vouchers, and thrift funds.
  • Society personnel are strictly responsible for maintaining credential confidentiality and immediately revoking permissions for retired or transferred staff.
4. Limitation of Liability (IT Act, 2000 & SaaS Terms)

In accordance with Section 43A and Section 79 of the Information Technology Act, 2000 (India) and applicable electronic data intermediary guidelines:

SAMABAY ONLINE and its operators (Buy Buy Biz) provide software-as-a-service (SaaS) on a commercially reasonable, enterprise-standard disaster recovery framework. Buy Buy Biz shall not be liable for indirect, incidental, or consequential damages resulting from force majeure circumstances, local administrative credential compromise, hardware failures at the local society premises, or third-party telecommunications outages beyond reasonable operational control.
Security Inquiries & Disaster Recovery Assistance
Have questions about data isolation, society vaults, or compliance audits?
Page Link Copied to Clipboard!