Access control, data governance, and emergency safety operations in one system layer
This section governs how access policies are enforced across portals, how visitor and event data is retained and anonymised, and how safety incidents and evacuations are managed.
Components of the Security & Compliance system
Access Control
Manages permission assignments, IP allowlists, and session policies across all portals.
Data Retention Manager
Configures auto-anonymisation windows and GDPR deletion schedules per data category.
Emergency Rollcall
One-click fire drill and evacuation rollcall with real-time mustering status per location.
Safety Audit Workflows
Configurable checklists for routine safety inspections and incident documentation.
Incident Reporting
Structured incident log with photo attachment, severity classification, and resolution tracking.
SSO & MFA Enforcement
Per-role MFA requirements and single sign-on provider configuration.
Three security domains with distinct configuration scope
Access Control
Identity & auth- Role-based permission assignment across all 13 portals
- IP allowlist enforcement per role or organisation-wide
- Configurable session timeout (15 min to 24 hrs)
- Per-role MFA enforcement (TOTP, SMS, hardware key)
- SSO provider binding with IdP-authoritative mode option
Data Governance
GDPR / retention- Configurable retention window per data category (visitor, event, finance)
- Automated hash-based pseudonymisation after retention window
- Right-to-erasure request processing with audit trail
- Data export for data subject access requests (DSAR)
- Consent capture configuration for visitor check-in forms
Safety Operations
Emergency & audit- One-click evacuation rollcall initiated from Security Desk or Super Admin
- Real-time mustering list with live check-in/check-out status
- Fire drill mode: all active visitor sessions marked as 'in drill'
- Configurable safety audit checklists per location
- Incident log with severity, description, photos, and resolution notes
Detail view of security and compliance interfaces
Access Control Panel
Central interface for assigning roles to users, configuring IP allowlists, and setting session policies. Changes apply immediately across all active sessions — no service restart required.
Access control reference
Data Retention Manager
Admins configure retention periods per data category. An asynchronous job monitors record age and triggers pseudonymisation when the window expires. Full audit trail of all anonymisation events is maintained.
Retention configuration
Emergency Rollcall
Activated from the Security Desk or Super Admin panel. Generates an instant mustering list of all visitors currently checked in. Each visitor can be marked as 'accounted for' by security staff on any device.
Rollcall setup guideSafety Audit Checklists
Admins build location-specific inspection checklists with pass/fail items, photo evidence fields, and corrective action notes. Completed audits are stored and searchable in the compliance reports library.
Checklist configurationIncident Reporting Interface
Security staff log incidents with structured fields: type, severity (low/medium/high/critical), affected area, description, photo attachments, and resolution status. Open incidents appear on the Security Desk dashboard.
Incident log referenceSSO & MFA Configuration
Connect SAML 2.0 or OIDC providers and configure MFA enforcement per role. MFA can be set to required, optional, or disabled at role level. Hardware key (FIDO2/WebAuthn) support is available on Enterprise.
SSO / MFA setupSecurity and compliance permission matrix
| Role / Portal | View access logs | Modify role permissions | Configure IP allowlist | Manage data retention | Process DSAR requests | Initiate rollcall | Log incidents | Configure SSO / MFA |
|---|---|---|---|---|---|---|---|---|
| Security Officer | ||||||||
| HR Administrator | ||||||||
| Operations Manager | ||||||||
| Compliance Officer | ||||||||
| IT Administrator | ||||||||
| Super Admin |
Setting up Security & Compliance
- 1
Configure SSO and MFA
Connect your identity provider under SSO settings. Select SAML 2.0 or OIDC, enter the provider metadata URL or upload the metadata XML, and map IdP groups to kaarobaarmeet.ai roles. Enable MFA enforcement per role after SSO is active.
- 2
Set session and IP policies
Define the session timeout period for each role tier. Optionally restrict login to specific IP CIDR ranges — useful for limiting admin console access to office networks or VPN exit nodes.
- 3
Configure data retention windows
Navigate to Data Governance and set the retention period for visitor records, event data, and financial transactions separately. The anonymisation job activates automatically when records age past their window.
- 4
Set up consent capture (GDPR)
In the Visitor Types configuration, enable the consent capture step for each applicable visitor category. Provide consent statement text in all required languages. Consent records are stored and exportable per visitor.
- 5
Configure emergency rollcall
Ensure at least one Security Officer role is active at each location. Test the rollcall flow using 'Fire Drill Mode' — this triggers a full rollcall without creating a compliance event. Verify that all connected devices receive the mustering alert.
- 6
Build safety audit checklists
In the Safety section, create a checklist template per inspection type (fire safety, first aid, building access). Assign it to relevant locations and set the inspection frequency. Completed audits auto-archive to the compliance reports library.
Identity, compliance, and safety system connections
Okta
SAML 2.0 SSO and SCIM 2.0 provisioning with MFA policy delegation.
Azure Active Directory
OIDC sign-in, group-based role sync, and Conditional Access policy support.
Duo Security
MFA enforcement via Duo Push, SMS, and hardware token for all portal logins.
PagerDuty
Route critical security incidents and rollcall activations to PagerDuty on-call schedules.
Splunk
Stream audit log events to Splunk indexes for SIEM correlation and alerting.
OneTrust
Export DSAR and consent records directly to OneTrust for privacy request management.
ServiceNow
Create ServiceNow incidents automatically on kaarobaarmeet.ai security events or rollcall activations.
REST API
Programmatic access to audit logs, compliance reports, and incident records via REST API v2.
Security system constraints and certifications
Authentication
- SSO protocols
- SAML 2.0, OIDC
- MFA methods
- TOTP, SMS, FIDO2/WebAuthn (Enterprise)
- Session timeout range
- 15 minutes – 24 hours
- IP allowlist format
- IPv4 CIDR, IPv6 CIDR
- Failed login lockout
- 5 attempts → 30 min lockout
Data Governance
- Anonymisation method
- SHA-256 pseudonymisation
- Retention window range
- 3 – 84 months
- DSAR processing time
- Automated export < 5 minutes
- Consent audit trail
- Retained permanently (hashed)
- Data residency options
- EU, US, APAC (Enterprise)
Safety Operations
- Rollcall activation latency
- < 10 seconds to all devices
- Incident severity levels
- Low, Medium, High, Critical
- Safety audit retention
- 5 years (configurable)
- Concurrent rollcalls
- 1 active per location
- Browser support
- Chrome 90+, Safari 15+, Edge 90+, Firefox 90+
Frequently Asked
Questions
Couldn't find what you were looking for?
KaarobaarMeet.ai is a full-stack digital ecosystem OS designed for modern Indian business infrastructure. It powers every touchpoint of visitor check-in, multi-room event scheduling, and enterprise facility operations — replacing physical logbooks with self-service kiosks, encrypted QR passes, instant WhatsApp host alerts, and real-time operations dashboards.
The platform includes 24 modular micro-apps covering Visitor Management, Event Automation, Smart Parking, Smart Badges & Wristbands, Member Directories, Startup Trackers, and Live Command Centers — all accessible under a unified tenant and single sign-on.
Yes. KaarobaarMeet.ai provides an enterprise multi-tenant hierarchy with 13 role-based portals. Corporate headquarters get unified analytics across all cities and branches, while individual security gates, reception desks, and event coordinators operate dedicated local interfaces.
Any standard iPad, Android tablet, touchscreen kiosk terminal, or desktop computer. For physical passes, the system integrates seamlessly with standard thermal printers (Zebra, Brother, TSC) via USB, Bluetooth, or local network.
Pre-registered visitors receive an encrypted QR entry pass directly on WhatsApp prior to arrival. When they arrive and scan in at the reception kiosk or gate, the system alerts the host on WhatsApp instantly with the visitor's photo, designation, and company name.
Other platform sections
Review the full security and compliance reference
Download the security implementation guide, view the data processing agreement, or schedule time with a solutions architect to map your compliance requirements.
