Home › Apps › Security & Compliance › Signed Runtime & Whitelisting

SECURITY & COMPLIANCE

Signed Runtime & Whitelisting

Q: How does Signed Runtime & Whitelisting compare to Any self-hosted software or Vendor trust on cost and capability?

vs Any self-hosted software: Code-signed builds with launch-time integrity checks — a tampered binary refuses to run. vs Vendor trust: Signed update channel — you verify the code, not the vendor's word. See the full comparison & TCO math

4.9on Google · 100+ verified reviews →

C-extension in-memory encryption, WMI hardware binding & NTFS icacls lockdown.

Every RetailDA™ runtime ships code-signed, AV-whitelisted and hardened across four production layers: native bare-metal Apache + PHP 8.x + MySQL execution, C-extension in-memory bytecode encryption, Windows WMI Motherboard-UUID hardware binding (0ms cached verification), and Inno Setup NTFS icacls Read-Only code directories.

Start free See it on your data

◈ Included on Scale (₹7,999/site/mo yearly) · or +₹2,999/site/mo ($39) Manufacturing & B2B Suite add-on on Growth

Availability

Delta OSGrowthScale →Enterprise →

Built for

All industries

Security & Compliance4 apps in this family

What you get

Capabilities that ship on day one.

C-extension in-memory encryption

Proprietary ERP files rest on disk as unreadable ciphertext and execute directly in RAM via a compiled C-extension loader — zero exposed source code and $0 decoder fees.

WMI Motherboard-UUID binding (0ms lag)

Cryptographically binds the licence to the physical server's motherboard UUID via Windows WMI attestation, cached daily for 0ms runtime latency — cloned drives refuse to boot.

NTFS icacls Read-Only code perimeter

Inno Setup NTFS icacls security rules lock the application code directory as strictly Read-Only while keeping MySQL ledger writes and uploads at 100% full speed.

Native bare-metal WAMP runtime

Local Apache + PHP 8.x + MySQL execution with zero virtualization lag or container throttling — plus code-signed binaries pre-whitelisted with major AV engines.

Get Signed Runtime & Whitelisting

Included on Scale (₹7,999/site/mo yearly) · or +₹2,999/site/mo ($39) Manufacturing & B2B Suite add-on on Growth.

No integration project

One price per site

Migrate with bulk import

Start free Book a demo Model in price calculator →

PDF vs Competition Rollout plan

Complete capability set

Everything Signed Runtime & Whitelisting ships with.

Native bare-metal WAMP runtime (Apache + PHP 8.x + MySQL) — zero virtualization lag C-extension in-memory code encryption — unreadable ciphertext on disk, compiled RAM execution Windows WMI Motherboard-UUID hardware binding — cached daily for 0ms performance lag Inno Setup NTFS icacls security rules — Read-Only code directory, 100% full-speed MySQL ledger writes Every binary code-signed Known-good hashes whitelisted with major AV engines Launch-time integrity self-check — tampered builds refuse to run Staged rollouts per site — never mid-rush Signed update channel Version pinning Rollback support Update audit trail

Signed Runtime & Whitelisting in the field

retailda · runtime · whitelist

41 entries1 blocked today

pos.exe v2.41sig ok · allowlistedrunning

svc-sync v1.9sig okrunning

upd-helper.exeunsignedblocked

kds-agent v3.0sig okrunning

Unsigned never runsring-fenced

Concept render — same capabilities as the shipped app; interface simplified for illustration.

Works with

The apps most teams switch on next

Nothing here needs connecting. Turning an app on simply reveals capability that is already reading the same data.

Data Protection Vault

PCI-DSS tokenisation and one-click customer erasure.

Learn more → Global Fiscal Compliance

Veri*Factu, NF525, TSE, eTax and Zakat frameworks.

Learn more → Granular Access Control

Role isolation that stops customer-list exfiltration.

Learn more →

Browse all 55 apps →

Integrations

Syncs with your existing stack

PCI-DSS GDPR DPDP ISO 27001 SOC 2 Veri*Factu NF525 TSE eTax Zakat

Running in production across a 97-terminal retail network, three defence & PSU canteens running air-gapped, field-custody stock at a national institute — and SCADA-controlled water-treatment plants.

Questions

About Signed Runtime & Whitelisting.

vs Any self-hosted software: Code-signed builds with launch-time integrity checks — a tampered binary refuses to run. vs Vendor trust: Signed update channel — you verify the code, not the vendor's word. See the full comparison & TCO math →

Both options are open: you can add the Manufacturing & B2B Suite (+₹2,999/site/mo · $39) onto Growth (₹2,999/site/mo), or choose Scale at ₹7,999/site/mo billed yearly (₹9,999/mo monthly · $109/mo · or ₹2,49,999 One-Time Perpetual). Scale includes the entire Manufacturing & B2B Suite, plus any 1 Industry Vertical Suite free (extra Vertical Suites 40% off) — so as soon as you pair a vertical suite with AI or BOM, Scale costs less per site. Every plan includes unlimited staff and registers, plus −10% at 10+ sites and −20% at 25+ sites.

Yes. On cloud plans, Signed Runtime & Whitelisting runs inside your dedicated TolsTek Isolated Cloud container (isolated database and Redis cache per tenant, with zero backend source code on counter devices). For hospitals, plants, defence and sovereign enterprises, Scale Perpetual and Enterprise deploy on locked Tier 1–4 Server-Rack hardware or fully air-gapped local networks — so patient records, plant telemetry, cryptographic keys and ledger rows never leave your perimeter.

There is no API glue, webhook chain or CSV sync to maintain. Signed Runtime & Whitelisting shares the exact same live stock, customer and fiscal ledger row as Data Protection Vault, Global Fiscal Compliance and Granular Access Control — switching them on simply exposes new workflows over the data your sites are already generating.

Immediately — because Signed Runtime & Whitelisting sits natively on the RetailDA™ ledger, there is no external warehouse, vector pipeline or third-party connector to build first. Role permissions and cost ceilings apply from minute one. Start a 14-day free trial or book a guided session on your own data →