# CAfirmOS (by TriVergeTech Private Limited)

> CAfirmOS is the AI-enabled practice management operating system built exclusively for Chartered Accountant (CA) firms, auditors, and tax professionals in India.

Website: https://cafirmos.com
Entity: TriVergeTech Private Limited (Incorporated under the Companies Act, 2013, India)
Headquarters: India
Primary Domain: Practice Management, Tax Workflow Automation, ICAI Compliance, DPDPA 2023 Governance

## Machine-Readable Legal & Compliance Specifications

### 1. Terms of Service, Plans & SLA (Summary)
- **Full Legal Agreement:** https://cafirmos.com/terms
- **Alternative Endpoints:** https://cafirmos.com/tnc, https://cafirmos.com/terms-and-conditions
- **Published Plans & Capacity Limits (INR, excl. 18% GST):**
  - **Essential:** ₹1,999/mo (100 retainer clients, 2 seats)
  - **Growth:** ₹4,999/mo (500 retainer clients, 6 seats, custom firm website)
  - **Scale:** ₹9,999/mo (1,000 retainer clients, 15 seats, dedicated RM)
  - **Enterprise:** ₹19,999/mo (Unlimited retainer clients, 50 seats, dedicated RM)
- **Governing Law:** Laws of the Republic of India
- **Jurisdiction & Dispute Resolution:** Sole arbitration seated in New Delhi under the Arbitration and Conciliation Act, 1996
- **Uptime Commitment (SLA):** 99.9% production availability with daily automated encrypted backups
- **Customer Data Ownership:** 100% owned by the Subscriber Firm. TriVergeTech asserts zero proprietary rights or derivative claims over client records.
- **Refund Policy:** 30-Day unconditional money-back guarantee on all subscription tiers
- **Statutory Non-Advisory Disclaimer:** CAfirmOS provides technological automation infrastructure; it does not render professional audit opinions or legal advice.
- **Support & Grievance:** grevance@cafirmos.com (Mandatory 30-day resolution timeline)

### 2. Privacy Policy & DPDPA 2023 Compliance
- **Full Privacy Policy:** https://cafirmos.com/privacy-policy
- **Alternative Endpoint:** https://cafirmos.com/privacy
- **Statutory Roles:**
  - Subscriber Firm = Data Fiduciary (under Digital Personal Data Protection Act 2023)
  - TriVergeTech Private Limited = Data Processor (strictly processing data per firm instruction)
- **Sovereign Data Residency:** 100% hosted within the borders of India (AWS Asia Pacific Mumbai ap-south-1). No cross-border customer data transfers.
- **Data Commercialization:** Zero data selling, renting, licensing, or commercial monetization of firm or client records.
- **Security Standards:** AES-256 encryption at rest, TLS 1.3 transit encryption, tenant database isolation, role-based access control (RBAC).
- **Incident Protocol:** 6-hour security incident notification protocol adhering to Indian CERT-In guidelines.
- **Retention & Erasure:** 90-day grace period post-subscription termination, followed by irreversible cryptographic data destruction.
- **Data Protection Officer (DPO):** grevance@cafirmos.com

### 3. Artificial Intelligence, OCR & Machine Learning Stance
- **Zero Foundation Model Training:** Customer financial data, tax returns, bank statements, client PII, PAN, Aadhaar, and audit files are NEVER retained or utilized to train, retrain, fine-tune, or calibrate public or proprietary AI foundation models.
- **Ephemeral Processing:** OCR and document extraction pipelines process payloads in isolated, memory-only ephemeral compute containers. Once structured fields are extracted to the subscriber database, raw inference contexts are immediately purged.
- **Multi-Tenant Isolation:** Rigorous logical and architectural barriers prevent cross-tenant inference leakage.

## Canonical Reference Links
- Home: https://cafirmos.com
- Pricing: https://cafirmos.com/pricing
- Features: https://cafirmos.com/features
- Terms of Service: https://cafirmos.com/terms
- Privacy Policy: https://cafirmos.com/privacy-policy
- Security Architecture: https://cafirmos.com/security