One directory. One sign-in. One invoice.
Every product sits on the same spine: people, organisations, roles, the audit trail, documents, payments and messaging. It is why a joiner added in People is in every picker within a minute.
Built once. Shared by every product.
Comriq Core holds the parts every product needs, so each product spends its effort on its own job. You never buy Core; it comes with whatever you buy.
- One directoryA person is typed once and read everywhere
- Sign-in and switcherOne login, move between products without signing out
- Roles and accessA matrix per product, versioned and audited
- Audit trailWho, when, before and after, on every change
- DocumentsBytes in Mumbai, the record in the database, signed links
- One invoiceEvery product on one bill a cycle
- MessagingEmail and WhatsApp with what was sent kept
- Your link at onceproduct.comriq.com/your-company the moment you start
Move between products without signing out.
One sign-in for the person, one company for the data. The switcher shows the products your company has, and each opens at its own address with the tenant remembered.
- Your link
- people.comriq.com/your-company works the second your account is created. No DNS, no waiting.
- Own domain
- On Business and Group plans: set one CNAME and the certificate issues itself.
- Staff access
- Comriq support sees your workspace only with your consent, read-only, time-boxed, and every screen lands in your audit log.
Every product on one bill.
One invoice per customer per cycle, numbered and immutable, with a usage annexure per product: each unit, its days, its rate and its amount. Disputes are raised from the invoice page within 30 days; the undisputed part stays payable.
Annexure: one row per employee and user with from, to, billable days, daily rate and amount. Computed by CQBill.buildInvoice.
Access you can read and change.
Multi-factor for admins
Owners and admins sign in with a second factor. Sessions are short and listed, and can be ended from Settings.
An Access matrix per product
Rows for every permission, columns for every role, set by the owner. Versioned, so you can see who changed what and when.
View as
The owner, and HR if allowed, can open the product as any role to check what they see. Actions are blocked and the visit is logged.
Support with consent
Comriq staff open a read-only view only for a support request, for at most an hour, and every screen they open is in your audit log.
Identity documents protected
Per-tenant encryption keys for identity documents, short-lived signed links, a virus scan on every upload.
No delete button for history
Records are corrected by new entries. Retention deletes whole records on schedule, with a certificate.
Stored in Mumbai.
The database and files are in Mumbai. The database holds the record (who uploaded, when, a hash, the retention date); storage holds the bytes. Your own OneDrive or Google Drive can receive a nightly one-way copy, never the master.
- Database
- Postgres, Mumbai (ap-south-1), row-level security per organisation
- Files
- Comriq storage in Mumbai, per-tenant prefix, encrypted
- Backups
- Daily, on servers in India, as the Companies (Accounts) Rules ask of your books
- Exports
- Any time, including while read-only or suspended, and for 30 days after termination
- Quota
- 10 GB per company to start, with an alert before it fills
- Sent through a provider in the United States; only the message and the recipient leave India
Who, when, before and after.
Written by the database on every insert and update, in every product. It cannot be switched off, and it is kept for eight years.
Your data, your decision.
Under the Digital Personal Data Protection Act 2023 your company is the data fiduciary and Comriq is its processor. A Data Processing Addendum comes with every subscription.
Processor, in writing
We process only on your instructions and for the purposes in the addendum.
Consent recorded
Where a feature needs consent (location, biometrics, Focus, children's data), the notice, the tick and its version are kept.
Children's data
Campus collects verifiable parental consent per purpose; no profiling or advertising.
Breach and grievance
A written incident procedure, notice to you without delay, and a Grievance Officer you can reach.
One spine, five products.
Start with one product. The rest join without moving your data.