Compliance and security
1.What this page covers
Purser is an Eximfiles product, operated by Dreamfuel Technologies Private Limited, Pune, India. This page describes how the Purser applications, Purser Outbound and Purser Inbound, behave on the questions a compliance reviewer asks first. It is a summary written to be read before you sign up.
The binding versions live elsewhere and say so on their own terms. The agreement presented inside the product at sign-up governs your use of the applications. The Privacy Policy on this site is scoped to this marketing site, which is a set of static pages and one contact form. Where this page and one of those documents differ, the document governs.
2.The two lines Purser will not cross
Purser never submits to a government portal. It reads, checks, reconciles and prepares. Every filing stops at awaiting approval, and a person transmits it on the portal, or the importer's own broker files it. Purser holds no accreditation, empanelment or filing designation from any authority, and claims none.
Purser never sends an outbound message without a recorded human approval event. The agent drafts the chaser, the correction and the counterparty reply, and puts each one in a queue. The approval is an event on the shipment record with an actor and a channel against it.
Anything read from a document, an email or a counterparty message is data, never an instruction. Text arriving from outside the tenant is treated as content to be extracted and checked. It cannot direct the agent, change a rule, release an approval or cause anything to be sent.
3.What Purser is not
- Not a government body, and not affiliated with one. Purser is private commercial software. It is not affiliated with, endorsed by, or accredited by the DGFT, the CBIC, ICEGATE, any Customs house or the Reserve Bank of India.
- Not a replacement for your CHA or broker. Purser produces the checked data set and the document pack. The filing, the assessment and the professional judgement stay with the licensed person who holds them today.
- Not legal, tax or customs advice. A rule verdict names the instrument it stands on and the date that instrument was read as at. It is a citation you can check, not an opinion you can rely on in place of your own advisers.
- Not a party to your trade. Purser takes no freight margin and no lending spread, does not sell to the intermediary, does not meter the document, and does not operate a network it also competes on.
4.The record, and how it is kept honest
Purser holds one record per shipment. Every document is a rendering of that record rather than a separate file, which is why the commercial invoice, the packing list and the declaration cannot disagree with each other about a value that was entered once.
- The audit trail is hash chained. Every event on the record carries its actor, its channel and a sha256 chain to the event before it, so the trail is tamper evident by construction rather than by promise.
- The stored copy is what circulates. Every rendered document is hashed at render time and the viewer serves the copy in circulation, not a fresh projection. What your counterparty saw is what the record holds.
- Approvals are events, not settings. A state change that needed a person records the person, so an approval can be produced later as evidence.
5.Rules are data, and every verdict cites
Compliance knowledge lives in versioned, effective-dated rulepacks published as signed data rather than as a code deploy. They compose in a fixed order, from the country-agnostic core through country of origin, country of destination, industry pack and agreement overlay to your own tenant policy, and a later layer may add or tighten but never delete.
Two consequences matter to a reviewer. Evaluation binds to the shipment's own date anchor, never to today, so a shipment is judged by the rules in force on its own dates and a closed period does not reprice when a rate changes. Every verdict names its instrument and the date it stands on, so a finding you disagree with can be traced to the provision it came from. A claim that cannot cite its source does not ship.
6.Protecting your information
- Tenant isolation. Row-level filters on every store, including the agent's vector memory. One tenant's shipments, documents and agent memory are never reachable from another tenant's queries.
- Access. Access to the systems that hold your information is restricted to the people who operate them.
- Applicable law. Personal data is handled in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law. The product's own privacy commitments are presented inside the product.
- What we never do. We do not sell your data, and we do not use it for advertising.
- Where it is held, and for how long. Purser data is held in [ TO CONFIRM: the hosting region for Purser production data ] and retained for [ TO CONFIRM: the retention period for shipment records after an account is closed, and the deletion route on request ].
- Models. [ TO CONFIRM: the model-training position for Purser. The sibling product states that identifiable filing data is not used to train models; Purser additionally keeps a per-tenant agent memory, so the equivalent sentence needs confirming before it is published here. ]
This page claims no independent security certification. Where a procurement needs a specific assurance, tell us what you need and we will answer it specifically rather than by badge.
7.Counterparties and outside access
Your CHA, forwarder, bank, buyer and supplier reach a shipment through scoped, time-boxed, revocable lanes, without creating accounts. A lane sees the shipment it was granted and nothing else, it expires, and it can be withdrawn. An external seat is never charged, on any tier, which is deliberate: charging for outside access would push work back into email attachments, where nothing is scoped and nothing expires.
8.Taking your data out
A full export of the shipment record, every document, every event and every decision, in an open schema, on demand, on every tier. The exit is part of the agreement rather than a support ticket, so the record is yours in practice and not only in principle. A document is never metered, so exporting the pack a shipment generated costs nothing either.
9.The questions we are asked most
Can Purser file with customs or DGFT on my behalf?
No. Purser never submits to a government portal. It prepares and checks the data set, stages the filing, and stops. A human transmits it on the portal, or the importer's own broker files it. This is a property of the product, not a setting, and there is no tier or configuration that changes it.
Can the agent email my buyer or my supplier without me?
No. Purser never sends an outbound message without a recorded human approval event. The agent drafts, checks and stages; the approval is an event on the shipment record with an actor against it. Nothing leaves on the agent's own initiative.
Does Purser replace my CHA or my customs broker?
No. Purser produces the checked data set your broker files and the documents a shipment needs, so the broker starts from a record that is already consistent. The filing, the assessment and the professional judgement remain theirs.
Can another customer see my shipments?
No. Every store carries row-level filters, including the agent's vector memory, so one tenant's shipments, documents and agent memory are not reachable from another tenant's queries.
Will a rule change reprice a shipment I already closed?
No. Rulepacks are versioned and effective-dated, and evaluation binds to the shipment's own date anchor rather than to today. A shipment is judged by the rules in force on its own dates, so a past period does not silently reprice under a new rate.
Can I get my data out?
Yes, and it is in writing: a full export of the shipment record, every document, every event and every decision, in an open schema, on demand, on every tier. The exit is part of the agreement rather than a support ticket.
If your question is not answered here, write to [email protected]. We answer questions about data handling from people who are not customers yet, because that is usually when they matter most.
10.Responsible disclosure
If you believe you have found a security vulnerability in Purser, write to [email protected] with enough detail for us to reproduce it, and give us a reasonable opportunity to remediate before any public disclosure. Do not access data that is not yours, do not degrade the service for others, and do not test against live tenants or real shipment records. We acknowledge reports and act on verified issues promptly.
11.Questions and grievances
For questions about compliance or how we handle your information, reach us through the contact section on the home page or write to [email protected]. The Grievance Officer for Dreamfuel Technologies Private Limited under Indian law is Amin Naik, at the same address. Your rights under the Digital Personal Data Protection Act, 2023 and the full grievance process are set out in the agreement and privacy commitments presented inside the product.