PCI-DSS tokenisation and one-click customer erasure.
◈ Included from the Growth plan (₹2,999/site/mo yearly)
PAN data never rests on your systems — tokens only.
Right-to-erasure requests propagate to every copy and backup policy.
Customer and ledger data encrypted with per-tenant keys.
Who saw what, when — exportable for auditors.
Every admin change, login and export — tamper-evident.
Included from the Growth plan (₹2,999/site/mo yearly).

Nothing here needs connecting. Turning an app on simply reveals capability that is already reading the same data.
Running in production across a 97-terminal retail network, three defence & PSU canteens running air-gapped, field-custody stock at a national institute — and SCADA-controlled water-treatment plants.
vs Enterprise DLP tools: PCI-DSS tokenisation and provable erasure — enterprise controls at a per-site price. vs Compliance consultants: Retention schedules, consent records and access evidence as features, not invoices. See the full comparison & TCO math →
Data Protection Vault is included from the Growth plan (₹2,999/site/mo billed yearly · ₹3,799/mo monthly · $39/mo · or ₹99,999 One-Time Perpetual), which unlocks all 28 core modular apps at that site across unlimited staff accounts and unlimited registers — you never pay a seat tax when hiring for peak season. It is also included in Scale (₹7,999/site/mo) and Enterprise, with automatic −10% at 10+ sites and −20% at 25+ sites.
Yes. On cloud plans, Data Protection Vault runs inside your dedicated TolsTek Isolated Cloud container (isolated database and Redis cache per tenant, with zero backend source code on counter devices). For hospitals, plants, defence and sovereign enterprises, Scale Perpetual and Enterprise deploy on locked Tier 1–4 Server-Rack hardware or fully air-gapped local networks — so patient records, plant telemetry, cryptographic keys and ledger rows never leave your perimeter.
There is no API glue, webhook chain or CSV sync to maintain. Data Protection Vault shares the exact same live stock, customer and fiscal ledger row as Signed Runtime & Whitelisting, Global Fiscal Compliance and Granular Access Control — switching them on simply exposes new workflows over the data your sites are already generating.
Immediately — because Data Protection Vault sits natively on the RetailDA™ ledger, there is no external warehouse, vector pipeline or third-party connector to build first. Role permissions and cost ceilings apply from minute one. Start a 14-day free trial or book a guided session on your own data →
Run a guided trial on your own catalogue with no card required, model this module in the live site calculator, or walk through a live system with an engineer.