Home › Apps › Security & Compliance › Granular Access Control

SECURITY & COMPLIANCE

Granular Access Control

Q: How does Granular Access Control compare to ERP user-licence models or Shared logins on cost and capability?

vs ERP user-licence models: Unlimited staff with role isolation — their pricing taxes your headcount, ours scopes it. vs Shared logins: Location-locked logins, segregation of duties and scoped API/agent tokens — accountability per person. See the full comparison & TCO math

4.9on Google · 100+ verified reviews →

Role isolation that stops customer-list exfiltration.

Roles that actually isolate: per-entity, per-surface, per-field permissions.
So the summer intern cannot download the customer list, and your agents inherit the same walls.

Start free See it on your data

◈ Included from the Growth plan (₹2,999/site/mo yearly)

Availability

Delta OSGrowth →Scale →Enterprise →

Built for

All industries

Security & Compliance4 apps in this family

What you get

Capabilities that ship on day one.

Role isolation

Permissions per entity, surface and field — not per screen.

Exfiltration guard

Bulk exports gated by role and logged with approval.

Scoped tokens

API and agent tokens bounded to the same permission model.

Segregation of duties

Refunds, discounts and payouts can require a second role.

Get Granular Access Control

Included from the Growth plan (₹2,999/site/mo yearly).

No integration project

One price per site

Migrate with bulk import

Start free Book a demo Model in price calculator →

PDF vs Competition Rollout plan

Complete capability set

Everything Granular Access Control ships with.

Role isolation by entity, surface & field Granular action permissions — refunds, discounts, voids Bulk-export gate & exfiltration log Scoped API & agent tokens Segregation of duties — sensitive ops need a second role Location-locked logins Per-register order visibility Custom roles & role duplication Login-attempt limits & role redirects Full session audit

retailda · access · roles

9 rolesbreak-glass armed

cashierrefund ≤₹500 · no voidenforced

shift-leadvoid + price-overPIN gate

auditorread-only + export logenforced

temp-staffpos onlylocked

Least-privilege defaultevery gate logged

Concept render — same capabilities as the shipped app; interface simplified for illustration.

Works with

The apps most teams switch on next

Nothing here needs connecting. Turning an app on simply reveals capability that is already reading the same data.

Data Protection Vault

PCI-DSS tokenisation and one-click customer erasure.

Learn more → GPS Cashier

Geo-verified sessions, drawer counts and keystroke logs.

Learn more → Global Fiscal Compliance

Veri*Factu, NF525, TSE, eTax and Zakat frameworks.

Learn more →

Browse all 55 apps →

Integrations

Syncs with your existing stack

PCI-DSS GDPR DPDP ISO 27001 SOC 2 Veri*Factu NF525 TSE eTax Zakat

Running in production across a 97-terminal retail network, three defence & PSU canteens running air-gapped, field-custody stock at a national institute — and SCADA-controlled water-treatment plants.

Questions

About Granular Access Control.

vs ERP user-licence models: Unlimited staff with role isolation — their pricing taxes your headcount, ours scopes it. vs Shared logins: Location-locked logins, segregation of duties and scoped API/agent tokens — accountability per person. See the full comparison & TCO math →

Granular Access Control is included from the Growth plan (₹2,999/site/mo billed yearly · ₹3,799/mo monthly · $39/mo · or ₹99,999 One-Time Perpetual), which unlocks all 28 core modular apps at that site across unlimited staff accounts and unlimited registers — you never pay a seat tax when hiring for peak season. It is also included in Scale (₹7,999/site/mo) and Enterprise, with automatic −10% at 10+ sites and −20% at 25+ sites.

Yes. On cloud plans, Granular Access Control runs inside your dedicated TolsTek Isolated Cloud container (isolated database and Redis cache per tenant, with zero backend source code on counter devices). For hospitals, plants, defence and sovereign enterprises, Scale Perpetual and Enterprise deploy on locked Tier 1–4 Server-Rack hardware or fully air-gapped local networks — so patient records, plant telemetry, cryptographic keys and ledger rows never leave your perimeter.

There is no API glue, webhook chain or CSV sync to maintain. Granular Access Control shares the exact same live stock, customer and fiscal ledger row as Data Protection Vault, GPS Cashier and Global Fiscal Compliance — switching them on simply exposes new workflows over the data your sites are already generating.

Immediately — because Granular Access Control sits natively on the RetailDA™ ledger, there is no external warehouse, vector pipeline or third-party connector to build first. Role permissions and cost ceilings apply from minute one. Start a 14-day free trial or book a guided session on your own data →