Compliance
Regulatory, tax and data-protection compliance for Akontec Store and the software it sells.
1. Corporate
Akontec Store is operated by Akontec Synergy Pvt Ltd, incorporated in India under CIN U70200WB2026PTC288824, with its head office in Chennai, Tamil Nadu. We are registered for GST and issue tax invoices for all Indian sales.
2. Data protection
We process personal data in line with the Digital Personal Data Protection Act, 2023 (India) and, for customers in scope, the GDPR. For data you enter into our products you are the data fiduciary/controller and we act as data processor under a Data Processing Agreement, available on request and standard for Enterprise contracts. Sub-processors (cloud hosting, payment gateways, email delivery, messaging providers) are listed in the DPA and updated with 30 days' notice.
Data subject requests received by us that relate to a customer's data are forwarded to that customer rather than actioned directly.
3. Tax and invoicing
Indian customers are billed in INR with GST at the applicable rate and a compliant tax invoice showing GSTIN, HSN/SAC and place of supply. Export sales are invoiced in USD under LUT where applicable. Our products generate GST-compliant documents, including e-invoicing (IRN) where the customer crosses the notified threshold, and GSTR-1/3B summaries — but filing remains the customer's responsibility.
4. Statutory features in the products
| Area | What the product handles |
|---|---|
| Payroll (Akon HRM) | PF, ESI, Professional Tax, LWF and TDS computation, Form 16 and ECR file generation. Statutory rate changes are applied centrally. |
| Invoicing (Akon Billing / Books) | GST invoices, e-invoicing IRN, e-way bill data, TDS deduction and return-ready summaries. |
| Messaging (CRM / Marketing / Helpdesk) | Consent capture, DND/DNC list checks and one-click unsubscribe to support TRAI and comparable rules. |
| Telephony (PBX / Contact Center) | Recording notification prompts, retention policies and access controls on recordings. |
5. Security certifications
Our infrastructure providers hold ISO/IEC 27001 certification and our payment gateways are PCI-DSS Level 1. Akontec itself operates an information security policy modelled on ISO 27001 controls; we do not currently hold an independent ISO 27001 or SOC 2 certificate in our own name and will not claim one until we do. Enterprise customers can request our security questionnaire responses, penetration test summary and architecture documentation.
6. AI use
AI agents answer from customer-approved content, operate inside configurable action limits and log every conversation for review. Customer data is not used to train shared or general-purpose models. Where an AI agent interacts with an end customer, we provide the disclosure controls needed to state that they are speaking with an automated assistant; enabling that disclosure where the law requires it is the customer's responsibility.
7. Reporting a concern
Compliance or grievance matters: support@akontec.com. Security vulnerabilities: security@akontec.com. We acknowledge within 2 business days and respond substantively within 30 days.