Firms hold the most sensitive data in the economy — PANs, GSTINs, Aadhaar, portal logins, financials. ReturnDone is built so that data is protected by default, not as an afterthought.
GST, income-tax, MCA and TRACES logins are encrypted, masked by default, and role-restricted. Every single reveal is written to an audit log.
Every firm is a separate tenant. No firm can ever see another firm's data — enforced at the data layer, not just the UI.
Partners see everything; managers their scope; staff only their own tasks. Clients and employees see only their own data.
Employee Aadhaar is treated as maximally sensitive — encrypted, masked, access-logged, and collected only when PF/ESI genuinely needs it.
Every status change, comment, file and credential view is recorded and can never be edited or deleted — only appended.
Nothing here is held hostage. Ask and we hand back a full copy of your firm's data, and on account closure it is returned or deleted — your choice, not ours.
For your firm's account data we act as Data Fiduciary; for the client and employee data you enter, you are the Fiduciary and ReturnDone is your Processor. We support consent, retention limits, deletion on closure, and a Grievance Officer you can write to — complaints acknowledged in 24 hours, resolved in 15 days. Data is stored encrypted in data centres located in India.