Your Data Never Leaves Your Computer (Unless You Want It To)
100% offline SQLite storage. AES-256-GCM encrypted backups. 5-layer read-only AI access. Zero cloud dependency.
Offline-First Architecture
Your data is stored locally in a SQLite database on your own computer. There are no cloud servers holding your business data. There is no third-party access. There is no "trust us" — there is simply no path for your data to leave your machine unless you explicitly enable encrypted backup.
Encryption
Military-grade where it matters.
- AES-256-GCM encryption with scrypt key derivation for cloud backups.
- Encrypted client-side before transmission — the backup server never sees unencrypted data.
.pharmabillarchives carry SHA-256 integrity verification against tampering or corruption.
AI Security (MCP) — 5 Layers of Read-Only
Your AI assistant can analyze — but never modify — your data.
SQLite opened readonly: true
Writes are impossible at the database driver level. The connection cannot mutate data even if every later layer failed.
SQL comment stripping + SELECT-only validation
Every query is parsed: comments are stripped, and anything other than a SELECT statement is rejected.
Dangerous keyword blocklist
INSERT, UPDATE, DELETE, DROP, ALTER, CREATE, TRUNCATE and friends are rejected outright.
No mutation tools in the MCP manifest
The AI assistant never even receives write-shaped capabilities — there is nothing to abuse.
Full audit logging
Every query the AI runs is written to mcp-access.log with timestamps. Review it anytime.
Access Control & Audit Trail
- Role-Based Access Control (RBAC) with granular permissions — who can discount, return, see margins or dispense scheduled drugs.
- Pharmacist gating for Schedule H/H1/X dispensing — restricted to registered pharmacist logins.
- Immutable audit trail: every action logged with user ID, timestamp, IP address and changed values — every CREATE, UPDATE, DELETE and LOGIN.
Data Ownership & Privacy
- You own your data. Export it anytime. Delete it anytime. No vendor lock-in.
- No telemetry without consent. Privacy-preserving analytics with zero patient health information (PHI) capture.
- DPDP Act 2023 aware. See our Privacy Policy for details.
Ready to Transform Your Pharmacy Billing?
Compliant, fast, and stress-free billing for Indian pharmacies, clinics and hospitals.