Kshitiz Sachan
Founder · Tribe
We finally have one source of truth across AR, AP and compliance. The real-time visibility lets our team operate with confidence.
Document Management
Documents on the record they belong to.
Vendor and customer KYC, contracts, statutory challans, MCA filings and audit proofs. Versioned, full-text searchable, hash-verified. India-hosted, Section 128 retention built in.
Trusted by finance teams
Vendor & Customer Documents
KYC on the vendor record.
GSTIN, PAN, MSME, ISO, bank cancelled cheque, NDA, MSA. Each document attached to the vendor or customer master with validity tracked and expiry alerts. Full-text search across the document body. Auditor sees every KYC alongside the underlying transactions. Not in someone's email folder.
Contract Management
Contracts with the renewal calendar built in.
MSAs, NDAs, service orders, addendums, statements of work and SLAs attached to vendor and customer records. Versioning preserves every revision. Renewal calendar surfaces auto-renewals before they trigger. Full-text search returns clauses, not just files.
Statutory Documents Vault
Every statutory challan, in one vault.
PF ECR, ESI ECR, Professional Tax challans across states, LWF receipts, TDS challans (CIN), GST challans, advance tax challans. Filed automatically against the period and the entity. Drill from the return to the challan to the proof of payment in three clicks.
Incorporation Documents Vault
Incorporation documents and board resolutions, one vault per entity.
CIN, Certificate of Incorporation, MOA, AOA, share certificates, DIN and DSC details, board and shareholder resolutions, ROC filings. Versioned, signed, and cross-linked to statutory registers and MCA filings. Auditors and lenders see what they need without a separate request.
Audit Evidence Packs
Per-filing evidence packs assemble themselves.
GSTR-3B for May? The pack carries the return, the GSTR-2B match, the underlying invoices, the GSTN acknowledgement and the supporting workpapers. AOC-4 audit pack? Schedule III financials, supporting JEs, source bills and the CA sign-off. One click, hash-verified at export.
Document Versioning
Old versions stay. The auditor finds both.
Every upload, edit, replacement and delete is captured with user, timestamp, IP and reason. Old versions stay alongside the current one. The audit trail is hash-chained for Rule 11(g). Auditors and the courts see the chain of custody, not just the latest file.
Document Full-Text Search
Search every document like it's a database.
Full-text search across native PDFs, Word, Excel, PowerPoint and OCR-extracted text from scanned PDFs and images. Filter by counterparty, period, document type and status. Match-in-context returns the file plus the page where the term appears.
Secure Document Sharing
Auditors, lenders and counsel get a link. Not a Drive folder.
Time-boxed share links carry role-based access, dynamic watermarks and view-only or download permissions. Activity logged per access (who, when, from where, what they viewed). The link expires when the engagement ends. No exit drama.
E-Signature
Aadhaar e-Sign and DSC, both inline.
Aadhaar e-Sign for contracts, NDAs and internal approvals. Class 2 and Class 3 DSC for ROC filings, GST returns and bank-grade documents. Both recognised under Sections 4 and 5 of the IT Act 2000. Signing happens inside the workflow, not in a separate tool.
DPDP Act Compliance
DPDP Act 2023, built in.
Personal-data inventory across vendors, customers, employees and contracts. Consent capture and renewal. Retention policies enforced. Data-principal request flows (access, correction, erasure) handled end to end. The compliance officer sees DPDP posture on a single dashboard.
At scale
Documents, by the numbers.
8 years
retention per Section 128 of the Companies Act
Hash-verified
evidence packs accepted by Big 4 auditors
Full-text
search across PDFs, Word, Excel and image OCR
Mumbai + Hyderabad
India-hosted with regional replicas
Customer stories
Finance teams running document control on OneFinOps.
Every bill, invoice and contract on one record, versioned with the audit trail intact, and retention rules that hold up at audit time.
Prasanthi Vijayagiri
Co-founder · EverUptime
As an early-stage team, we can't justify a finance back office. OneFinOps gives us clean, compliant books from day one.
Sashi Pagadala
CEO · Praval
Coordinating finance and procurement used to eat hours every day. OneFinOps now saves our team nearly 18 hours a week.
Buyer FAQ
What teams ask before they switch.
What document types are supported?
PDF, Word, Excel, PowerPoint, images (JPG, PNG, with OCR), email (.eml, .msg), CSV. Up to 100 MB per file in standard upload; larger files supported via S3-compatible link. The OCR pipeline handles scanned PDFs, photographed bills and embedded image emails so search works across all of them.
Can auditors get time-boxed access?
Yes. Time-boxed share links carry role-based access, watermarks and view-only or download permissions. Activity is logged per access (who opened it, when, from where). The auditor uses the same link across every audit working paper without provisioning a regular user account.
How is full-text search done across PDFs and scanned documents?
Native PDF text indexes directly. Scanned PDFs and images run through OCR at upload. Search returns match-in-context with the source page link, so the user can jump to exactly where the matched text sits in the document.
How are audit evidence packs assembled?
For any filing or period, the pack contains the return, the supporting reconciliation (GSTR-2B match for GSTR-3B, vendor confirmations for AP), the underlying invoices and bills, the GSTN or MCA acknowledgement, the relevant CA workpapers and the hash chain. Big 4 firms accept the format directly.
Where are documents stored, and is data resident in India?
Indian customers' documents are stored encrypted at rest in AWS Mumbai with replicas in Hyderabad. The platform also has Singapore (APAC), Frankfurt (EU) and US-East regions for groups with non-Indian residency requirements. Per-tenant encryption keys. Cross-region replication only happens when explicitly configured.
How does e-signature work, and is it legally valid in India?
Aadhaar e-Sign and DSC (Class 2 and Class 3) are both supported. Both are recognised under Sections 4 and 5 of the IT Act 2000 as legally equivalent to a physical signature. Aadhaar e-Sign covers most contract and approval workflows; DSC is used where statutory forms or ROC submissions require it.
Does the system handle the DPDP Act 2023 personal-data requirements?
Yes. Personal-data fields are tagged at the document level. Consent, retention, purpose and access controls apply per the data principal. Data principal request flows (access, correction, erasure) are supported. The retention engine enforces deletion at the end of the consent period.
Bring last quarter's documents. See the audit pack assemble.
Connect one entity, free. Upload GSTINs, contracts, TDS challans, board resolutions. Watch them attach to the right record, become searchable and roll into a hash-verified audit pack.
Comparing alternatives?