Security
Your credentials stay with you. So does control.
What happens to your credential, who can see your business, how your accountant gets access, how you go live, and what this website collects. Stated plainly, so you can check it.
How Startouch keeps you in control
Your MRA portal password stays with you
It is never asked for and never stored: not in the database, not in a log, not in the audit trail, not in a support ticket. The same is true of your OTP.
Credentials handled only where genuinely required
You create your credential on the MRA portal and enter it into Startouch yourself. It is stored encrypted, per business, and no screen, role or export can display it afterwards, including to our own staff.
Permissions are granular
Business details, places, MRA onboarding confirmation, user management, credential enrolment, go-live, billing and accountant access can each be granted separately, to a named person, permanently or for a limited time.
Accountant access is yours to grant
Your accountant’s practice sees only what you authorise, with reconciliation and export granted separately. Accountant access never includes MRA credential handling, production go-live approval or billing control unless you explicitly grant it. You can withdraw it at any time without involving us.
Everything is attributable
Every action is written to an audit trail that cannot be edited, against the person who took it. Fiscal documents are chained so any alteration is detectable, and records are kept for the statutory period.
Go-live is controlled
A business is switched to live transmission by an explicit, recorded act after its checks pass. Nothing goes live by default, and nothing goes live during a demo or a trial.
Our staff have no back door
Each business’s data is its own. Our staff reach a business only through a time-boxed, recorded access window opened for a stated reason. There is no standing back door and no shared administrator account.
Payment and fiscal integrity are separate
Issuing and transmitting are never blocked by a billing state. A late payment can restrict conveniences; it cannot cost you compliance or your history. That is a rule in the platform’s design, enforced in code and covered by tests.
The MRA relationship
Stated exactly.
Startouch is not endorsed, approved, certified, accredited, recommended or listed by the Mauritius Revenue Authority, and nothing on this site should be read as saying otherwise. Each customer registers its own EBS with MRA, in its own name, and creates its own credential. Where this site describes the e-Invoicing obligation, it does so in neutral terms; for dates, thresholds and scope, MRA’s own published material is the only authority.
Privacy
What this website collects.
The forms on this site collect what you are asking for: a name, a business name, an email, a mobile number where verification needs it, and the plan and options you chose. Never a credential, a BRN, a VAT number, an EBS MRA ID, a tax figure or a fiscal document. Your fiscal identity is collected inside the product, during onboarding, where it belongs.
Until the commercial services behind the trial, quotation and checkout pages are connected, those pages send nothing anywhere; your entries stay in your browser. The contact form is sent by this website’s own server, by email, to the Startouch team; it never passes through the fiscal application. Requests are kept for twelve months and then deleted, unless a customer relationship exists. To have a request deleted sooner, send us a deletion request; you do not have to give a reason.
This website sets no tracking cookies and carries no analytics script, advertising pixel, cross-site identifier or chat widget. Your theme, billing-period and plan-chooser preferences are kept in your own browser’s storage. Nothing is sent from your browser to any analytics service, ours or anyone else's. Like any web host, ours keeps standard server logs of the requests it receives.