Security and trust
Your books,under your control.
What protects the records your business files tax on: who can see and change them, how people sign in, what we hold and what we never do.
No. 01Sign-in
Who gets in.
Two-step sign-in
After the password, a six-digit code from an authenticator app. Optional per person, on every plan; an Owner or Admin can reset it for someone who loses their phone.
Single sign-on (SAML or OIDC), on Enterprise
Single sign-on through your own identity provider over SAML or OIDC (for example Okta, Microsoft Entra ID or Google Workspace). Your company's email domains, proven by a DNS record, sign in through it.
SCIM provisioning, on Enterprise
Your identity provider adds, switches off and removes people and syncs groups, across every Varynt product. New people get no access until a group or an admin gives it, and synced groups stay read-only in Varynt.
IP allow-list
Owners and Admins can limit the workspace to its own networks; a request from anywhere else is refused.
One Varynt account
The same sign-in across the Varynt suite, with your devices and sessions visible to you.
No. 02Access
Who can do what.
Five roles for your team and a separate login for your clients' people, which sees only their own documents.
Owner
- Business & GST details, numbering, members
- Terms, bank, UPI ID, tax rates
- Clients, items and quotations
- Draft and issue invoices
- Cancel an issued invoice
- Record payments
- Vendors, bills and expenses
- Bank import, matching and reconciliation
- Reports and export
- Audit log
- Read everything
Admin
- Business & GST details, numbering, members
- Terms, bank, UPI ID, tax rates
- Clients, items and quotations
- Draft and issue invoices
- Cancel an issued invoice
- Record payments
- Vendors, bills and expenses
- Bank import, matching and reconciliation
- Reports and export
- Audit log
- Read everything
Accountant
- Terms, bank, UPI ID, tax rates
- Clients, items and quotations
- Draft and issue invoices
- Cancel an issued invoice
- Record payments
- Vendors, bills and expenses
- Bank import, matching and reconciliation
- Reports and export
- Read everything
Staff
- Clients, items and quotations
- Draft and issue invoices
- Vendors, bills and expenses
- Read everything
ViewerFree seat
- Reports and export
- Read everything
The Viewer seat is free — it is meant for your CA
No. 03Data
What we hold, and don't.
Issued documents never change
An issued invoice is frozen; corrections are cancellations or credit notes, so the record stays whole.
No card, no bank credentials
We keep no card on file and hold no login to any bank. A bank account keeps only the last four digits of its number. Nothing here can move money.
An audit log
Owners and Admins read who did what. The activity feed is kept for 180 days.
Your data is yours
Never used for marketing, never shared with other Varynt products. Every list and report exports on Business and Enterprise; every document prints on any plan.
This website
Sets no cookies, loads its fonts from itself and makes no third-party requests.
No. 04Compliance
Said carefully.
We answer to India's Digital Personal Data Protection Act. For your clients' data you are responsible and we process it on your behalf; see the privacy policy.
We hold no security certification today, and we will not claim one until we do. For a security questionnaire, write to invoice-contact@varynt.in.